CVE-2026-28310: SolarWinds Serv-U Privilege Escalation Vulnerability
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a system administrator. The impact is lower in Windows deployments.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Serv-Uto a version that resolves this vulnerability.Fixed in 2026.3
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28310?
The severity of CVE-2026-28310 is critical with a score of 9.1.
How do I fix CVE-2026-28310?
To fix CVE-2026-28310, upgrade SolarWinds Serv-U to the latest version that addresses this vulnerability.
What type of vulnerability is CVE-2026-28310?
CVE-2026-28310 is a privilege escalation vulnerability.
Who is affected by CVE-2026-28310?
CVE-2026-28310 affects domain administrators of SolarWinds Serv-U who may escalate their privileges.
What is the impact of CVE-2026-28310 in Windows deployments?
The impact of CVE-2026-28310 is lower in Windows deployments compared to other environments.