CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-06 08:14 UTC
  • Importiert: 2026-06-13 13:01 UTC
  • CVSS: 7.5
  • Quelle-ID: thn_global
  • uid_hash: 9e32b78ac648c6470a845d287899a90c6d74cc2dcf4dd0113ee25624545d203c

Inhalt

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity security flaw impacting SolarWinds Serv-U multi-protocol file server software to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

The vulnerability, tracked as CVE-2026-28318 (CVSS score: 7.5), is a denial-of-service (DoS) bug that causes the service to crash

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-28318

HIGH

7.5

HIGH

7.5

2026-06-04

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews