CVE-2018-15906: SolarWinds Serv-U FTP Server

High severity, CVSS 7.2. EPSS: 8.1% chance of exploitation in the next 30 days.

SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file.

Affected products

• SolarWinds Serv-U FTP Server: version 15.1.6 only

Published 2019-03-21. Last modified 2026-06-17.