THREATOPS

THREAT OPS › CVEs › CVE-2026-28318

CVE-2026-28318 — SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

CISA KEVExploited: confirmedSolarWinds

SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication.

Vulnerability details

Affected productsServ-U
KEV remediation due2026-06-19

Related reporting

[CISA KEV] CVE-2026-28318 — SolarWinds Serv-U: SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerabilitycisa_kev
8th June – Threat Intelligence Reportcheckpoint_research
June 2026 CVE Landscaperecordedfuture