Privilege Escalation Vulnerability in SolarWinds Serv-U

CVE-2026-28307

What is CVE-2026-28307?

SolarWinds Serv-U is susceptible to a privilege escalation flaw that could enable users within a domain user group to escalate their permissions to those of an administrator group. This vulnerability primarily affects deployments in environments where Serv-U is utilized, posing potential risks for user access management. The implications are notably reduced in Windows deployments, making it crucial for administrators to review user group policies and system configurations to mitigate the risk.

References