CVE-2023-40053: SolarWinds Serv-U

Medium severity, CVSS 5.0. EPSS: 0.8% chance of exploitation in the next 30 days.

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously.

Affected products

• SolarWinds Serv-U: version 15.4.0 only

Published 2023-12-06. Last modified 2026-06-17.