CVE-2026-28321: SolarWinds Serv-U Broken Access Control Vulnerability
SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute code as root. A domain administrator access is required, and the impact is lower in Windows installations.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Serv-Uto a version that resolves this vulnerability.Fixed in 2026.3
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28321?
The severity of CVE-2026-28321 is critical with a score of 9.1.
How does CVE-2026-28321 affect SolarWinds Serv-U?
CVE-2026-28321 affects SolarWinds Serv-U by allowing broken access control that could lead to arbitrary file read and write, escalating privileges, and executing code as root.
What must be done to exploit CVE-2026-28321?
To exploit CVE-2026-28321, the attacker requires domain administrator access.
Is the impact of CVE-2026-28321 different on Windows installations?
Yes, the impact of CVE-2026-28321 is lower in Windows installations compared to other platforms.
How can I mitigate risks associated with CVE-2026-28321?
To mitigate risks associated with CVE-2026-28321, ensure proper access controls are implemented and regularly audit permissions on SolarWinds Serv-U.