<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: solarwinds-serv-u</title><description>Every new CVE for solarwinds-serv-u.</description><link>https://agentprime.io/</link><item><title>CVE-2026-28321: SolarWinds Serv-U Broken Access Control Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28321/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28321/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:39:46 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28317: SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28317/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28317/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:39:30 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28316: SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28316/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28316/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:39:17 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28315: SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28315/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28315/</guid><description>CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:39:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28314: SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28314/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28314/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:38:39 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28313: SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28313/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28313/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:38:22 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28312: SolarWinds Serv-U Privilege Escalation Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28312/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28312/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:37:45 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28310: SolarWinds Serv-U Privilege Escalation Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28310/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28310/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:35:07 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28309: SolarWinds Serv-U Broken Access Control Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28309/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28309/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:34:52 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28308: SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28308/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28308/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:34:40 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28307: SolarWinds Serv-U Privilege Escalation Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28307/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28307/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:34:26 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28306: SolarWinds Serv-U Privilege Escalation Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28306/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28306/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:34:09 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28305: SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28305/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28305/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:33:55 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28304: SolarWinds Serv-U Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28304/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28304/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:32:04 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28302: SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28302/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28302/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 15:31:30 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28318: SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28318/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28318/</guid><description>CVSS 7.5 (High). Critical: In CISA’s KEV catalogue since 5 Jun 2026: it is known to be exploited. CVSS score 7.5 (7.0 or more) and EPSS 0.44 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Jun 2026 14:05:58 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2025-40541: SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-40541/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40541/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 24 Feb 2026 07:41:49 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-40540: SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-40540/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40540/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 24 Feb 2026 07:41:17 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-40539: SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-40539/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40539/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 24 Feb 2026 07:40:46 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-40538: SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-40538/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40538/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 24 Feb 2026 07:40:12 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-40549: SolarWinds Serv-U Path Restriction Bypass Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-40549/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40549/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Nov 2025 08:41:24 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-40548: SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-40548/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40548/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Nov 2025 08:38:19 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-40547: SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-40547/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40547/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Nov 2025 08:35:03 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-45712: SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-45712/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-45712/</guid><description>CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Apr 2025 08:39:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-45711: SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-45711/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-45711/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Oct 2024 07:27:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-45714: SolarWinds Serv-U Stored XSS Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-45714/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-45714/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Oct 2024 07:26:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-28995: SolarWinds Serv-U L Directory Transversal Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-28995/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28995/</guid><description>CVSS 8.6 (High). Critical: In CISA’s KEV catalogue since 17 Jul 2024: it is known to be exploited. CVSS score 8.6 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Jun 2024 09:01:23 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2024-28072: Arbitrary File Overwrite Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-28072/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28072/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 May 2024 07:50:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-40053: HTML injection Vulnerability in Serv-U 15.4</title><link>https://agentprime.io/advisories/CVE-2023-40053/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-40053/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 06 Dec 2023 03:23:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-40060: 2FA/MFA Bypass Vulnerability in Serv-U 15.4 and 15.4 Hotfix 1</title><link>https://agentprime.io/advisories/CVE-2023-40060/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-40060/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 07 Sep 2023 15:57:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-35179: 2FA/MFA Bypass Vulnerability in Serv-U 15.4</title><link>https://agentprime.io/advisories/CVE-2023-35179/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-35179/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Aug 2023 23:14:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-35249: Domain Admin Broken Access Control</title><link>https://agentprime.io/advisories/CVE-2021-35249/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-35249/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 May 2022 19:44:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-35250: Directory Transversal Vulnerability in Serv-U 15.3</title><link>https://agentprime.io/advisories/CVE-2021-35250/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-35250/</guid><description>CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.13 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Apr 2022 19:47:54 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2021-35247: Improper Input Validation Vulnerability in Serv-U</title><link>https://agentprime.io/advisories/CVE-2021-35247/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-35247/</guid><description>CVSS 4.3 (Medium). Critical: In CISA’s KEV catalogue since 21 Jan 2022: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Jan 2022 22:39:50 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2021-35223: Execute Command Function Allows Remote Code Execution (RCE)Vulnerability</title><link>https://agentprime.io/advisories/CVE-2021-35223/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-35223/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Aug 2021 16:00:18 GMT</pubDate><category>CVE</category></item></channel></rss>