Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4508 articles · 223849 vulns · 37/41 feeds (7d)
← Back to list
6.2
CVE-2026-28315PATCHED
solarwinds · serv-u

SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) Vulnerability

Description

SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could lead to session hijacking or information disclosure from an administrator account.

Affected Products

VendorProductVersions
solarwindsserv-u15.5.4 HF1 and below

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
solarwindsserv-ucert_advisory90%

References

  • https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28315(vendor-advisory)
  • https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_2026-3_release_notes.htm(release-notes)

Related News (3 articles)

Tier B
BSI Advisories67d ago
[NEU] [hoch] SolarWinds Serv-U: Mehrere Schwachstellen
→ No new info (linked only)
Tier D
Heise Security67d ago
Datentransfersoftware Serv-U hat 15 kritische Sicherheitslücken
→ No new info (linked only)
Tier C
VulDB68d ago
CVE-2026-28315 | SolarWinds Serv-U cross site scripting
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.16.2 MEDIUM
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28315
CWECWE-79
PublishedJul 21, 2026
Trending Score0
Source articles3
Independent3
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-28324
SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability
Trending: 44
HIGHCVE-2026-28326
SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability
Trending: 37
HIGHCVE-2026-28325
SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability
Trending: 35
CRITICALCVE-2026-28302
SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability
CRITICALCVE-2026-28305
SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jul 21, 2026
Discovered by ZDM
Jul 21, 2026
Patch Available
Jul 21, 2026