Security Advisory
CVE-2026-28309
9.1
CRITICAL
Vulnerability Description
SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows deployments.
Published Date
July 21, 2026
Official Source
NIST NVD Advisory