CVE-2026-28317
CRITICALCVSS 9.1/10EPSS 0.34%
Last modified
CVE-2026-28317 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires domain administrator access. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires domain administrator access. The impact is lower in Windows deployments.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Solarwinds | Serv-U | < 2026.3 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-28317?
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires domain administrator access. The impact is lower in Windows deployments.
How severe is CVE-2026-28317?
CVE-2026-28317 has a CVSS score of 9.1/10 (CRITICAL severity). The EPSS model estimates a 0.34% probability of exploitation in the next 30 days.
How do I fix CVE-2026-28317?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-28310SolarWinds Serv-U is affected by a privilege escalation vuln…9.1
- CVE-2026-28312SolarWinds Serv-U is affected by a privilege escalation vuln…9.1
- CVE-2026-28313SolarWinds Serv-U is affected by an insecure direct object r…9.1
- CVE-2026-28314SolarWinds Serv-U is affected by an insecure direct object r…9.1
- CVE-2026-28315SolarWinds Serv-U was found to be affected by a stored cross…6.2
- CVE-2026-28316SolarWinds Serv-U is affected by an insecure direct object r…9.1
- CVE-2026-28318SolarWinds Serv-U is susceptible to specially crafted POST r…7.5
- CVE-2026-2832Certain Samsung MultiXpress Multifunction Printers may be vu…5.3
- CVE-2026-28321SolarWinds Serv-U is affected by a broken access control vul…9.1
- CVE-2026-28322SolarWinds Database Performance Analyzer was found to be aff…5.6
- CVE-2026-28323SolarWinds Web Help Desk is found to be affected by a SAML a…9.8
- CVE-2026-2833An HTTP request smuggling vulnerability (CWE-444) was found …9.1
Are you affected by CVE-2026-28317?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST