CVE-2026-28315: SolarWinds Serv-U

Medium severity, CVSS 6.2. EPSS: 0.5% chance of exploitation in the next 30 days.

SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could lead to session hijacking or information disclosure from an administrator account.

Affected products

• SolarWinds Serv-U: before 2026.3 (fixed in 2026.3)

Published 2026-07-21. Last modified 2026-07-24.