SE
File Transfer
Serv-U
On CISA KEVExploited in the wildRansomware-linked
55
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 19High 20Medium 16Low 0
Watch
Add Serv-U to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-35211 RansomwareIn wildKEV | 10.0 | Jul 14 | Serv-U Remote Memory Escape Vulnerability Affected: before 15.2.3; 15.2.3; 15.2.3 |
| CVE-2020-35481 | 9.8 | Feb 3 | SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection Affected: before 15.2.2 |
| CVE-2026-28321 | 9.1 | Jul 21 | SolarWinds Serv-U Broken Access Control Vulnerability Affected: 15.5.4 HF1 and below |
| CVE-2026-28317 | 9.1 | Jul 21 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Affected: 15.5.4 HF1 and below |
| CVE-2026-28316 | 9.1 | Jul 21 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Affected: 15.5.4 HF1 and below |
| CVE-2026-28314 | 9.1 | Jul 21 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Affected: 15.5.4 HF1 and below |
| CVE-2026-28313 | 9.1 | Jul 21 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Affected: 15.5.4 HF1 and below |
| CVE-2026-28312 | 9.1 | Jul 21 | SolarWinds Serv-U Privilege Escalation Vulnerability Affected: 15.5.4 HF1 and below |
| CVE-2026-28310 | 9.1 | Jul 21 | SolarWinds Serv-U Privilege Escalation Vulnerability Affected: 15.5.4 HF1 and below |
| CVE-2026-28309 | 9.1 | Jul 21 | SolarWinds Serv-U Broken Access Control Vulnerability Affected: 15.5.4 HF1 and below |
| CVE-2026-28308 | 9.1 | Jul 21 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Affected: 15.5.4 HF1 and below |
| CVE-2026-28307 | 9.1 | Jul 21 | SolarWinds Serv-U Privilege Escalation Vulnerability Affected: 15.5.4 HF1 and below |
| CVE-2026-28306 | 9.1 | Jul 21 | SolarWinds Serv-U Privilege Escalation Vulnerability Affected: 15.5.4 HF1 and below |
| CVE-2026-28305 | 9.1 | Jul 21 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Affected: 15.5.4 HF1 and below |
| CVE-2026-28304 | 9.1 | Jul 21 | SolarWinds Serv-U Remote Code Execution Vulnerability Affected: 15.5.4 HF1 and below |
| CVE-2026-28302 | 9.1 | Jul 21 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Affected: 15.5.4 HF1 and below |
| CVE-2025-40549 | 9.1 | Nov 18 | A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute code on a directory Affected: before 15.5.3 |
| CVE-2025-40548 | 9.1 | Nov 18 | A missing validation process exists in Serv U when abused, could give a malicious actor with access to admin privileges the ability to execute code Affected: before 15.5.3 |
| CVE-2025-40547 | 9.1 | Nov 18 | A logic error vulnerability exists in Serv-U which when abused could give a malicious actor with access to admin privileges the ability to execute code Affected: before 15.5.3 |
Showing 19