HIGHVulnerability
Verified
Global

CISA KEV: SolarWinds Serv-U — SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication.

Analysis

SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication. Added to CISA Known Exploited Vulnerabilities catalog on 2026-06-05. Remediation due: 2026-06-19.

Indicators of Compromise (1)

CVE (1)
CVE-2026-28318
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Jun 5, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

UK investors sue Binance

Nearly 1700 UK investors have filed a group action legal claim seeking at least £150 million from crypto platform Binance and its founder Changpeng Zhao.

Finextra
MEDIUMVulnerabilityNEW

Danske Bank extends AWS partnership for AI push

Denmark’s Danske Bank is expanding its collaboration with Amazon Web Services as it bids to accelerate the rollout of AI-enabled products and services.

Finextra
MEDIUMVulnerabilityNEW

Instant business payments platform Root emerges from stealth

Root, an instant payments platform that powers receivables, payables, and money transmissions, has emerged from stealth with a mission to modernise money movement in the US.

Finextra