CVE-2026-28306: SolarWinds Serv-U Privilege Escalation Vulnerability
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is lower in Windows deployments.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Serv-Uto a version that resolves this vulnerability.Fixed in 2026.3
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28306?
CVE-2026-28306 has a critical severity rating of 9.1.
How can I fix CVE-2026-28306?
Fix CVE-2026-28306 by updating SolarWinds Serv-U to the latest version that addresses this vulnerability.
What type of vulnerability is CVE-2026-28306?
CVE-2026-28306 is a privilege escalation vulnerability.
Who is impacted by CVE-2026-28306?
CVE-2026-28306 impacts domain administrators using SolarWinds Serv-U, allowing them to elevate privileges.
Is the impact of CVE-2026-28306 different on Windows deployments?
Yes, the impact of CVE-2026-28306 is lower in Windows deployments compared to other environments.