Threat intelligence / Vulnerability
CVE-2026-28318
SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication.
Vulnerability
TypeVulnerability
External ID—
First seen2026-06-05
Last seen2026-06-05
Confidence
—
SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication.
Labels
CISA KEV context
Vendor / productSolarWinds Serv-U
Added2026-06-05
Due date2026-06-19
4 recorded
Relationships
2 external