CVE-2026-28302
Last modified
CVE-2026-28302 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execution as root. This issue requires group administrator access. EPSS estimates a 0.56% chance of exploitation in the next 30 days.
Description
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execution as root. This issue requires group administrator access. The impact is lower in Windows deployments.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Solarwinds | Serv-U | < 2026.3 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-28302?
How severe is CVE-2026-28302?
How do I fix CVE-2026-28302?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-28296A flaw was found in the FTP GVfs backend. A remote attacker …4.3
- CVE-2026-28297SolarWinds Observability Self-Hosted was found to be affecte…8.7
- CVE-2026-28298SolarWinds Observability Self-Hosted was found to be affecte…8.1
- CVE-2026-28299SolarWinds Web Help Desk is found to be affected by a denial…7.5
- CVE-2026-2830The WP All Import – Drag & Drop Import for CSV, XML, Excel &…6.1
- CVE-2026-28301A vulnerability in which an attacker can provide a crafted e…4.8
- CVE-2026-28304SolarWinds Serv-U is affected by a remote code execution vul…9.1
- CVE-2026-28305SolarWinds Serv-U is affected by an insecure direct object r…9.1
- CVE-2026-28306SolarWinds Serv-U is affected by a privilege escalation vuln…9.1
- CVE-2026-28307SolarWinds Serv-U is affected by a privilege escalation vuln…9.1
- CVE-2026-28308SolarWinds Serv-U is affected by an insecure direct object r…9.1
- CVE-2026-28309SolarWinds Serv-U is affected by a broken access control vul…9.1
Are you affected by CVE-2026-28302?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST