{"schema_version":1,"title":"SolarWinds Serv-U vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 20 vulnerabilities in SolarWinds Serv-U: 0 in the last 7 days and 15 in the last 90 days, 18 of them critical and 4 exploited in the wild. The most recent, CVE-2026-28321, was published on 21 July 2026.","url":"https://junglewise.ai/threats/technologies/serv-u","json_url":"https://junglewise.ai/threats/technologies/serv-u.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/serv-u","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":1,"all_time":20,"critical":18,"exploited":4,"last_7_days":0,"last_30_days":0,"last_90_days":15,"last_365_days":16},"latest":[{"cve":"CVE-2026-28321","cvss":9.1,"slug":"cve-2026-28321-solarwinds-serv-u-broken-access-control-privilege-escalation","title":"SolarWinds Serv-U broken access control privilege escalation","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:10.293+00:00","url":"https://junglewise.ai/threats/cve-2026-28321-solarwinds-serv-u-broken-access-control-privilege-escalation"},{"cve":"CVE-2026-28317","cvss":9.1,"slug":"cve-2026-28317-solarwinds-serv-u-privilege-escalation-via-idor","title":"SolarWinds Serv-U privilege escalation via IDOR","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:10.157+00:00","url":"https://junglewise.ai/threats/cve-2026-28317-solarwinds-serv-u-privilege-escalation-via-idor"},{"cve":"CVE-2026-28316","cvss":9.1,"slug":"cve-2026-28316-solarwinds-serv-u-idor-privilege-escalation-to-root","title":"SolarWinds Serv-U IDOR privilege escalation to root","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:09.943+00:00","url":"https://junglewise.ai/threats/cve-2026-28316-solarwinds-serv-u-idor-privilege-escalation-to-root"},{"cve":"CVE-2026-28315","cvss":6.2,"slug":"cve-2026-28315-solarwinds-serv-u-stored-xss-in-administrator-interface","title":"SolarWinds Serv-U stored XSS in administrator interface","severity":"medium","exploited":false,"published_at":"2026-07-21T16:17:09.417+00:00","url":"https://junglewise.ai/threats/cve-2026-28315-solarwinds-serv-u-stored-xss-in-administrator-interface"},{"cve":"CVE-2026-28314","cvss":9.1,"slug":"cve-2026-28314-solarwinds-serv-u-account-takeover-via-idor","title":"SolarWinds Serv-U account takeover via IDOR","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:09.283+00:00","url":"https://junglewise.ai/threats/cve-2026-28314-solarwinds-serv-u-account-takeover-via-idor"},{"cve":"CVE-2026-28313","cvss":9.1,"slug":"cve-2026-28313-solarwinds-serv-u-idor-and-smtp-hijacking","title":"SolarWinds Serv-U IDOR and SMTP Hijacking","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:09.147+00:00","url":"https://junglewise.ai/threats/cve-2026-28313-solarwinds-serv-u-idor-and-smtp-hijacking"},{"cve":"CVE-2026-28312","cvss":9.1,"slug":"cve-2026-28312-solarwinds-serv-u-privilege-escalation-in-administrator-group","title":"SolarWinds Serv-U privilege escalation in administrator group access","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:09+00:00","url":"https://junglewise.ai/threats/cve-2026-28312-solarwinds-serv-u-privilege-escalation-in-administrator-group"},{"cve":"CVE-2026-28310","cvss":9.1,"slug":"cve-2026-28310-solarwinds-serv-u-privilege-escalation-in-administrative","title":"SolarWinds Serv-U privilege escalation in administrative interface","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:08.877+00:00","url":"https://junglewise.ai/threats/cve-2026-28310-solarwinds-serv-u-privilege-escalation-in-administrative"},{"cve":"CVE-2026-28309","cvss":9.1,"slug":"cve-2026-28309-solarwinds-serv-u-broken-access-control-in-administrator-account","title":"SolarWinds Serv-U broken access control in administrator account creation","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:08.743+00:00","url":"https://junglewise.ai/threats/cve-2026-28309-solarwinds-serv-u-broken-access-control-in-administrator-account"},{"cve":"CVE-2026-28308","cvss":9.1,"slug":"cve-2026-28308-solarwinds-serv-u-idor-remote-code-execution","title":"SolarWinds Serv-U IDOR remote code execution","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:08.577+00:00","url":"https://junglewise.ai/threats/cve-2026-28308-solarwinds-serv-u-idor-remote-code-execution"},{"cve":"CVE-2026-28307","cvss":9.1,"slug":"cve-2026-28307-solarwinds-serv-u-privilege-escalation-in-domain-user-groups","title":"SolarWinds Serv-U privilege escalation in domain user groups","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:08.443+00:00","url":"https://junglewise.ai/threats/cve-2026-28307-solarwinds-serv-u-privilege-escalation-in-domain-user-groups"},{"cve":"CVE-2026-28306","cvss":9.1,"slug":"cve-2026-28306-solarwinds-serv-u-privilege-escalation-in-domain-administration","title":"SolarWinds Serv-U privilege escalation in domain administration","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:08.317+00:00","url":"https://junglewise.ai/threats/cve-2026-28306-solarwinds-serv-u-privilege-escalation-in-domain-administration"},{"cve":"CVE-2026-28305","cvss":9.1,"slug":"cve-2026-28305-solarwinds-serv-u-idor-remote-code-execution-as-root","title":"SolarWinds Serv-U IDOR remote code execution as root","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:08.18+00:00","url":"https://junglewise.ai/threats/cve-2026-28305-solarwinds-serv-u-idor-remote-code-execution-as-root"},{"cve":"CVE-2026-28304","cvss":9.1,"slug":"cve-2026-28304-solarwinds-serv-u-remote-code-execution-via-improper-access","title":"SolarWinds Serv-U remote code execution via improper access control","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:08.05+00:00","url":"https://junglewise.ai/threats/cve-2026-28304-solarwinds-serv-u-remote-code-execution-via-improper-access"},{"cve":"CVE-2026-28302","cvss":9.1,"slug":"cve-2026-28302-solarwinds-serv-u-idor-privilege-escalation-in-group-management","title":"SolarWinds Serv-U IDOR privilege escalation in group management","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:07.903+00:00","url":"https://junglewise.ai/threats/cve-2026-28302-solarwinds-serv-u-idor-privilege-escalation-in-group-management"},{"cve":"CVE-2026-28318","cvss":7.5,"epss":0.0006,"slug":"cve-2026-28318-solarwinds-serv-u-denial-of-service-via-crafted-post-request","title":"SolarWinds Serv-U denial of service via crafted POST request","severity":"critical","exploited":true,"published_at":"2026-06-04T15:16:50.407+00:00","url":"https://junglewise.ai/threats/cve-2026-28318-solarwinds-serv-u-denial-of-service-via-crafted-post-request"},{"cve":"CVE-2024-28995","cvss":8.6,"slug":"cve-2024-28995-solarwinds-serv-u-path-traversal-vulnerability","title":"SolarWinds Serv-U Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-28995-solarwinds-serv-u-path-traversal-vulnerability"},{"cve":"CVE-2021-35247","cvss":5.3,"slug":"cve-2021-35247-solarwinds-serv-u-improper-input-validation-vulnerability","title":"SolarWinds Serv-U Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-35247-solarwinds-serv-u-improper-input-validation-vulnerability"},{"cve":"CVE-2021-35211","cvss":10,"slug":"cve-2021-35211-solarwinds-serv-u-remote-code-execution-vulnerability","title":"SolarWinds Serv-U Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-35211-solarwinds-serv-u-remote-code-execution-vulnerability"},{"cve":"CVE-1999-0219","cvss":7.8,"slug":"cve-1999-0219-rhinosoft-serv-u-buffer-overflow-in-cwd-and-ls-commands","title":"Rhinosoft Serv-U buffer overflow in CWD and LS commands","severity":"high","exploited":false,"published_at":"1997-07-01T04:00:00+00:00","url":"https://junglewise.ai/threats/cve-1999-0219-rhinosoft-serv-u-buffer-overflow-in-cwd-and-ls-commands"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":14,"exploited":0,"vulnerabilities":15},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"SolarWinds Web-Help-Desk","slug":"web-help-desk","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/web-help-desk"},{"name":"SolarWinds Observability Self-Hosted","slug":"observability-self-hosted","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/observability-self-hosted"}],"technology":{"hub":true,"name":"SolarWinds Serv-U","slug":"serv-u","vendor":{"name":"SolarWinds","slug":"solarwinds","url":"https://junglewise.ai/threats/vendors/solarwinds"},"aliases":[],"category":"web-server","homepage":"https://www.solarwinds.com/serv-u-managed-file-transfer-server","description":"A managed file transfer and FTP server software for Windows and Linux.","url":"https://junglewise.ai/threats/technologies/serv-u"},"most_severe":[{"cve":"CVE-2021-35211","cvss":10,"slug":"cve-2021-35211-solarwinds-serv-u-remote-code-execution-vulnerability","title":"SolarWinds Serv-U Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-35211-solarwinds-serv-u-remote-code-execution-vulnerability"},{"cve":"CVE-2024-28995","cvss":8.6,"slug":"cve-2024-28995-solarwinds-serv-u-path-traversal-vulnerability","title":"SolarWinds Serv-U Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2024-07-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-28995-solarwinds-serv-u-path-traversal-vulnerability"},{"cve":"CVE-2026-28318","cvss":7.5,"epss":0.0006,"slug":"cve-2026-28318-solarwinds-serv-u-denial-of-service-via-crafted-post-request","title":"SolarWinds Serv-U denial of service via crafted POST request","severity":"critical","exploited":true,"published_at":"2026-06-04T15:16:50.407+00:00","url":"https://junglewise.ai/threats/cve-2026-28318-solarwinds-serv-u-denial-of-service-via-crafted-post-request"},{"cve":"CVE-2021-35247","cvss":5.3,"slug":"cve-2021-35247-solarwinds-serv-u-improper-input-validation-vulnerability","title":"SolarWinds Serv-U Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-21T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-35247-solarwinds-serv-u-improper-input-validation-vulnerability"},{"cve":"CVE-2026-28321","cvss":9.1,"slug":"cve-2026-28321-solarwinds-serv-u-broken-access-control-privilege-escalation","title":"SolarWinds Serv-U broken access control privilege escalation","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:10.293+00:00","url":"https://junglewise.ai/threats/cve-2026-28321-solarwinds-serv-u-broken-access-control-privilege-escalation"},{"cve":"CVE-2026-28317","cvss":9.1,"slug":"cve-2026-28317-solarwinds-serv-u-privilege-escalation-via-idor","title":"SolarWinds Serv-U privilege escalation via IDOR","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:10.157+00:00","url":"https://junglewise.ai/threats/cve-2026-28317-solarwinds-serv-u-privilege-escalation-via-idor"},{"cve":"CVE-2026-28316","cvss":9.1,"slug":"cve-2026-28316-solarwinds-serv-u-idor-privilege-escalation-to-root","title":"SolarWinds Serv-U IDOR privilege escalation to root","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:09.943+00:00","url":"https://junglewise.ai/threats/cve-2026-28316-solarwinds-serv-u-idor-privilege-escalation-to-root"},{"cve":"CVE-2026-28314","cvss":9.1,"slug":"cve-2026-28314-solarwinds-serv-u-account-takeover-via-idor","title":"SolarWinds Serv-U account takeover via IDOR","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:09.283+00:00","url":"https://junglewise.ai/threats/cve-2026-28314-solarwinds-serv-u-account-takeover-via-idor"},{"cve":"CVE-2026-28313","cvss":9.1,"slug":"cve-2026-28313-solarwinds-serv-u-idor-and-smtp-hijacking","title":"SolarWinds Serv-U IDOR and SMTP Hijacking","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:09.147+00:00","url":"https://junglewise.ai/threats/cve-2026-28313-solarwinds-serv-u-idor-and-smtp-hijacking"},{"cve":"CVE-2026-28312","cvss":9.1,"slug":"cve-2026-28312-solarwinds-serv-u-privilege-escalation-in-administrator-group","title":"SolarWinds Serv-U privilege escalation in administrator group access","severity":"critical","exploited":false,"published_at":"2026-07-21T16:17:09+00:00","url":"https://junglewise.ai/threats/cve-2026-28312-solarwinds-serv-u-privilege-escalation-in-administrator-group"}],"generated_at":"2026-09-27T03:07:00.185062+00:00"}