solarwinds Vulnerability Advisory Catalog

Total 334 security vulnerabilities recorded for solarwinds software and firmware.

← Back to All Vendors
CVE-2026-28321 CRITICAL
Component: serv-u

SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escal...

📅 2026-07-21
CVSS 9.1 Dossier →
CVE-2026-28317 CRITICAL
Component: serv-u

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires d...

📅 2026-07-21
CVSS 9.1 Dossier →
CVE-2026-28316 CRITICAL
Component: serv-u

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation to a system administra...

📅 2026-07-21
CVSS 9.1 Dossier →
Component: serv-u

SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could lead to session hijacking or information disclosu...

📅 2026-07-21
CVSS 6.2 Dossier →
CVE-2026-28314 CRITICAL
Component: serv-u

SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication is required....

📅 2026-07-21
CVSS 9.1 Dossier →
CVE-2026-28313 CRITICAL
Component: serv-u

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary account...

📅 2026-07-21
CVSS 9.1 Dossier →
CVE-2026-28312 CRITICAL
Component: serv-u

SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code exec...

📅 2026-07-21
CVSS 9.1 Dossier →
CVE-2026-28310 CRITICAL
Component: serv-u

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a syst...

📅 2026-07-21
CVSS 9.1 Dossier →
CVE-2026-28309 CRITICAL
Component: serv-u

SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The...

📅 2026-07-21
CVSS 9.1 Dossier →
CVE-2026-28308 CRITICAL
Component: serv-u

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator...

📅 2026-07-21
CVSS 9.1 Dossier →
CVE-2026-28307 CRITICAL
Component: serv-u

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The ...

📅 2026-07-21
CVSS 9.1 Dossier →
CVE-2026-28306 CRITICAL
Component: serv-u

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system admin...

📅 2026-07-21
CVSS 9.1 Dossier →
CVE-2026-28305 CRITICAL
Component: serv-u

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root. A domain acc...

📅 2026-07-21
CVSS 9.1 Dossier →
CVE-2026-28304 CRITICAL
Component: serv-u

SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as roo...

📅 2026-07-21
CVSS 9.1 Dossier →
CVE-2026-28302 CRITICAL
Component: serv-u

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execut...

📅 2026-07-21
CVSS 9.1 Dossier →
Component: serv-u

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: defla...

📅 2026-06-04
CVSS 7.5 Dossier →
Component: web_help_desk

SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to c...

📅 2026-06-02
CVSS 8.2 Dossier →
Component: ftp_voyager

FTP Voyager 16.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by injecting oversized buffer data ...

📅 2026-04-04
CVSS 6.2 Dossier →
Component: observability_self-hosted

SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to uninte...

📅 2026-03-26
CVSS 5.9 Dossier →
Component: observability_self-hosted

SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to uninte...

📅 2026-03-26
CVSS 6.1 Dossier →
CVE-2025-40541 CRITICAL
Component: serv-u

An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native...

📅 2026-02-24
CVSS 9.1 Dossier →
CVE-2025-40540 CRITICAL
Component: serv-u

A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileg...

📅 2026-02-24
CVSS 9.1 Dossier →
CVE-2025-40539 CRITICAL
Component: serv-u

A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileg...

📅 2026-02-24
CVSS 9.1 Dossier →
CVE-2025-40538 CRITICAL
Component: serv-u

A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and exe...

📅 2026-02-24
CVSS 9.1 Dossier →
Page 1 of 14 (334 Total Records)