CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SolarWinds Serv-U Unauthenticated Remote Denial of Service (DoS) Vulnerability (CVE-2026-28318) Analysis and Mitigation Guide
[Affected Scope] SolarWinds Serv-U file transfer server versions prior to 15.5.4 Hotfix 1
[Impact] Unauthenticated remote attackers can crash the Serv-U service instantly by sending specially crafted HTTP POST requests utilizing 'Content-Encoding: deflate'
[Mitigation] Immediately apply the official security patch (15.5.4 Hotfix 1 or later) or implement WAF rules to block specific compression headers
SolarWinds Serv-U Directory Traversal and Sensitive File Disclosure Vulnerability (CVE-2024-28995) Security Advisory
[Affected Scope] SolarWinds Serv-U FTP Server versions 15.4.2 Hotfix 1 and prior
[Impact] Unauthenticated remote attackers can exploit a directory traversal vulnerability to read sensitive host system and configuration files
[Mitigation] Immediately upgrade to SolarWinds Serv-U version 15.4.2 Hotfix 2 or later