CVE-2026-28307: SolarWinds Serv-U Privilege Escalation Vulnerability
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Serv-Uto a version that resolves this vulnerability.Fixed in 2026.3
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28307?
The severity of CVE-2026-28307 is critical with a CVSS score of 9.1.
How do I fix CVE-2026-28307?
To fix CVE-2026-28307, update your SolarWinds Serv-U software to the latest version that addresses this vulnerability.
What systems are impacted by CVE-2026-28307?
CVE-2026-28307 primarily impacts SolarWinds Serv-U installations where domain users can be elevated to administrator privileges.
What is the impact of CVE-2026-28307 on Windows deployments?
The impact of CVE-2026-28307 is lower in Windows deployments compared to other environments.
Who is affected by CVE-2026-28307?
Domain user groups have the potential to be elevated to administrative access through CVE-2026-28307.