SolarWinds has released updates to address four critical security flaws in its Serv-U file transfer software that, if successfully exploited, could result in remote code execution. The vulnerabilities, all rated 9.1 on the CVSS scoring system, are listed below - CVE-2025-40538 - A broken access control vulnerability that allows an attacker to create a system admin user and execute arbitrary
SolarWinds has released updates to address four critical security flaws in its Serv-U file transfer software that, if successfully exploited, could result in remote code execution.
The vulnerabilities, all rated 9.1 on the CVSS scoring system, are listed below -
CVE-2025-40538 - A broken access control vulnerability that allows an attacker to create a system admin user and execute arbitrary
This Verisq Intelligence Brief is an independent analysis. Read the original reporting at the link above.
Verisq matches published vulnerabilities against the software your vendors run, so you know which relationships this touches before the next review.
See vendor exposure →