CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-06-04
SolarWinds Serv-U Unauthenticated Remote Denial of Service (DoS) Vulnerability (CVE-2026-28318) Analysis and Mitigation Guide
[Affected Scope] SolarWinds Serv-U file transfer server versions prior to 15.5.4 Hotfix 1
[Impact] Unauthenticated remote attackers can crash the Serv-U service instantly by sending specially crafted HTTP POST requests utilizing 'Content-Encoding: deflate'
[Mitigation] Immediately apply the official security patch (15.5.4 Hotfix 1 or later) or implement WAF rules to block specific compression headers