CISA Flags Fresh SolarWinds Serv-U Flaw as Actively Exploited
CISA Flags Fresh SolarWinds Serv-U Flaw as Actively Exploited 🚨
CISA has added CVE-2026-28318 in SolarWinds Serv-U to its KEV catalog on June 5, 2026, confirming active exploitation of a DoS vulnerability via crafted POST requests. Federal agencies must patch by June 19. The flaw affects versions before 15.5.4 Hotfix 1, which SolarWinds released to address it. Organizations should verify deployments immediately.
SolarWinds Serv-U serves as a multi-protocol file server, and many enterprises rely on it for secure transfers. However, the product has faced repeated scrutiny. Earlier this year alone, multiple flaws drew attention. This latest issue, tracked as CVE-2026-28318, affects versions before 15.5.4 Hotfix 1. The company released the fix in that exact build, and documentation confirms it. SolarWinds release notes detail the update. Administrators who skipped the hotfix now sit exposed.
Action Steps for Security Teams 🔍
- Inventory Serv-U deployments today.
- Check internet exposure.
- Apply the 15.5.4 Hotfix 1 without exception.
- Monitor for unusual POST traffic.
- Look for resource spikes that precede crashes.
For more details, Read full article.