CVE-2026-28312: SolarWinds Serv-U Privilege Escalation Vulnerability
SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code execution as root. The impact is lower in Windows deployments.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Serv-Uto a version that resolves this vulnerability.Fixed in 2026.3
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28312?
CVE-2026-28312 has a critical severity rating of 9.1.
How does CVE-2026-28312 affect SolarWinds Serv-U?
CVE-2026-28312 allows a privilege escalation that can elevate user access to system administrator level and enables code execution as root.
What are the potential impacts of CVE-2026-28312 on Windows deployments of SolarWinds Serv-U?
The impact of CVE-2026-28312 is lower in Windows deployments compared to other operating systems.
How can organizations fix CVE-2026-28312?
Organizations should apply the latest security patches provided by SolarWinds to remediate CVE-2026-28312.
Is CVE-2026-28312 exploitable remotely?
Yes, CVE-2026-28312 is remotely exploitable due to its access vector being classified as AV:N.