CVE-2025-40548 SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability
An attacker with admin privileges can execute arbitrary code due to missing validation, requiring a patch to mitigate the risk.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-40548?
CVE-2025-40548 is a critical vulnerability in Solarwinds Serv-U, published on 18 Nov 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A missing validation process exists in Serv U when abused, could give a malicious actor with access to admin privileges the ability to execute code.
This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default.
Weakness: CWE-269
Which versions are affected by CVE-2025-40548?
It affects 1 product.
Products include Solarwinds Serv-U.
How do I fix CVE-2025-40548?
No fix has been published for CVE-2025-40548 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-40548 being exploited?
There is no known exploitation of CVE-2025-40548 in the wild and no public exploit code.
Other vulnerabilities in Solarwinds Serv-U
Sources
Also known as GHSA-crpp-v376-mvfw.