CVE-2026-28318 — SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability
SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are pr…
Published: 2026-06-04 · CVSS: 7.5 · CVSS 3.1
SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7