Solarwinds Serv-u Vulnerabilities

4 advisories affecting Solarwinds Serv-u

4

Total CVEs

4

Critical

0

High

CVE-2025-40538

Feb 24, 2026

Critical (9.1)

A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary code as a privileged account via do...

Read Advisory

CVE-2025-40539

Feb 24, 2026

Critical (9.1)

A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account. This issue requires administrative pr...

Read Advisory

CVE-2025-40541

Feb 24, 2026

Critical (9.1)

An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account. This issue require...

Read Advisory

CVE-2025-40540

Feb 24, 2026

Critical (9.1)

A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account. This issue requires administrative pr...

Read Advisory

Never Miss a Critical Alert

CVE advisories, breach reports, and threat intel — delivered daily to your inbox.