Denial of Service Vulnerability in SolarWinds Serv-U
CVE-2026-28318

7.5HIGH

Key Information:

Vendor

Solarwinds
Status
Serv-u
Vendor
CVE Published:
4 June 2026

Badges

📈 Trended📈 Score: 2,160💰 Ransomware👾 Exploit Exists🟡 Public PoC🟣 EPSS 10%🦅 CISA Reported📰 News Worthy

What is CVE-2026-28318?

false

CISA has reported CVE-2026-28318

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2026-28318 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace as recent news articles suggest the vulnerability is being used by ransomware groups.

The CISA's recommendation is: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Affected Version(s)

Serv-U Windows 15.5.4 and previous versions

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

servu-cve-2026-28318-poc
Created by EaEa0001

News Articles

favicon imageHelp Net Security

Week in review: Exploited Check Point VPN zero-day, Oracle PeopleSoft servers under attack - Help Net Security

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: DockSec: Open-source AI-powered Docker security scanner

2 weeks ago

favicon imageIt Security News

CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318) - IT Security News

A vulnerability (CVE-2026-28318) that can be exploited to crash SolarWinds Serv-U file transfer servers is being leveraged by attackers in the wild, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed on Friday. The agency has ordered US federal civilian…Read more →

2 weeks ago

favicon imageHelp Net Security

CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318) - Help Net Security

A vulnerability (CVE-2026-28318) that can be exploited to crash SolarWinds Serv-U file transfer servers is being leveraged by attackers.

2 weeks ago

References

https://www.solarwinds.com/trust-center/security-advisori...
https://documentation.solarwinds.com/en/success_center/se...

EPSS Score

10% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 💰

    Used in Ransomware

  • 🟡

    Public PoC available

  • 📈

    Vulnerability started trending

  • 👾

    Exploit known to exist

  • 🦅

    CISA Reported

  • 📰

    First article discovered by BleepingComputer

  • Vulnerability published

  • Vulnerability Reserved

.