CVE-2026-28308
CRITICALCVSS 9.1/10EPSS 0.55%
Last modified
CVE-2026-28308 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. EPSS estimates a 0.55% chance of exploitation in the next 30 days.
Description
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The impact is lower in Windows deployments.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Solarwinds | Serv-U | < 2026.3 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-28308?
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The impact is lower in Windows deployments.
How severe is CVE-2026-28308?
CVE-2026-28308 has a CVSS score of 9.1/10 (CRITICAL severity). The EPSS model estimates a 0.55% probability of exploitation in the next 30 days.
How do I fix CVE-2026-28308?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-28301A vulnerability in which an attacker can provide a crafted e…4.8
- CVE-2026-28302SolarWinds Serv-U is affected by an insecure direct object r…9.1
- CVE-2026-28304SolarWinds Serv-U is affected by a remote code execution vul…9.1
- CVE-2026-28305SolarWinds Serv-U is affected by an insecure direct object r…9.1
- CVE-2026-28306SolarWinds Serv-U is affected by a privilege escalation vuln…9.1
- CVE-2026-28307SolarWinds Serv-U is affected by a privilege escalation vuln…9.1
- CVE-2026-28309SolarWinds Serv-U is affected by a broken access control vul…9.1
- CVE-2026-2831The MailArchiver plugin for WordPress is vulnerable to SQL I…4.9
- CVE-2026-28310SolarWinds Serv-U is affected by a privilege escalation vuln…9.1
- CVE-2026-28312SolarWinds Serv-U is affected by a privilege escalation vuln…9.1
- CVE-2026-28313SolarWinds Serv-U is affected by an insecure direct object r…9.1
- CVE-2026-28314SolarWinds Serv-U is affected by an insecure direct object r…9.1
Are you affected by CVE-2026-28308?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST