# Solarwinds Serv-U


- [CVE-2021-35211](https://insights.sbomify.com/CVE-2021-35211/): SolarWinds Serv-U Remote Code Execution (critical 9.0, exploited in the wild)
- [CVE-2024-28995](https://insights.sbomify.com/CVE-2024-28995/): SolarWinds Serv-U Path Traversal Vulnerability (high 8.6, exploited in the wild)
- [CVE-2026-28318](https://insights.sbomify.com/CVE-2026-28318/): SolarWinds Serv-U Uncontrolled Resource Consumption (high 7.5, exploited in the wild)
- [CVE-2021-35247](https://insights.sbomify.com/CVE-2021-35247/): SolarWinds Serv-U Improper Input Validation (medium 4.3, exploited in the wild)
- [CVE-2020-35481](https://insights.sbomify.com/CVE-2020-35481/): Code injection in n/a (critical 9.8)
- [CVE-2026-28302](https://insights.sbomify.com/CVE-2026-28302/): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (critical 9.1)
- [CVE-2026-28304](https://insights.sbomify.com/CVE-2026-28304/): SolarWinds Serv-U Remote Code Execution Vulnerability (critical 9.1)
- [CVE-2026-28305](https://insights.sbomify.com/CVE-2026-28305/): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (critical 9.1)
- [CVE-2026-28306](https://insights.sbomify.com/CVE-2026-28306/): SolarWinds Serv-U Privilege Escalation Vulnerability (critical 9.1)
- [CVE-2026-28307](https://insights.sbomify.com/CVE-2026-28307/): SolarWinds Serv-U Privilege Escalation Vulnerability (critical 9.1)
- [CVE-2026-28308](https://insights.sbomify.com/CVE-2026-28308/): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (critical 9.1)
- [CVE-2026-28309](https://insights.sbomify.com/CVE-2026-28309/): SolarWinds Serv-U Broken Access Control Vulnerability (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/products/solarwinds/serv-u/