CVE-2026-28306

Analyzed Analyzed - Analysis Complete

Privilege Escalation in SolarWinds Serv-U

Publication date: 2026-07-21

Last updated on: 2026-07-24

Assigner: SolarWinds

Description

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is lower in Windows deployments.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-24

Generated

2026-08-11

AI Q&A

2026-07-21

EPSS Evaluated

2026-08-09

NVD

CVE-2026-28306

EUVD

EUVD-2026-46287

Affected Vendors & Products

Vendor	Product	Version / Range
solarwinds	serv-u	to 2026.3 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a privilege escalation vulnerability in SolarWinds Serv-U where a domain administrator can gain system administrator privileges. The impact is reduced in Windows environments.

Detection Guidance

To detect CVE-2026-28306, check the installed version of SolarWinds Serv-U. If it is 15.5.4 HF1 or below, the system is vulnerable. Upgrade to version 2026.3 or later to mitigate the risk.

Impact Analysis

An attacker with domain admin access could escalate to system admin, gaining full control over the affected system. This could lead to data theft, system compromise, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations may face penalties or legal consequences if such breaches occur due to unpatched systems.

Mitigation Strategies

Apply the latest security patches from SolarWinds immediately to address the privilege escalation vulnerability. Restrict domain administrator privileges to only necessary users and monitor system logs for unusual privilege changes.

Hi! I’m here to help you understand CVE-2026-28306. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70