CVE-2021-35223: SolarWinds Serv-U

High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days.

The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution.

Affected products

• SolarWinds Serv-U: before 15.2.4 (fixed in 15.2.4)

Published 2021-08-31. Last modified 2026-06-17.