Vulnerabilities
Unauthenticated attackers can exploit the flaw via specially crafted POST requests that crash the Serv-U service.
Hi, what are you looking for?
SecurityWeek
All posts tagged "SolarWinds"
Vulnerabilities
The four security defects could be exploited for remote code execution but require administrative privileges.
Vulnerabilities
Disclosed at the end of January, the SolarWinds vulnerability was likely exploited as a zero-day since December 2025.
Vulnerabilities
Vulnerable SolarWinds Web Help Desk instances were exploited in December 2025 for initial access.
Vulnerabilities
The critical-severity SolarWinds Web Help Desk flaw could lead to unauthenticated remote code execution.
Vulnerabilities
The four critical flaws could be exploited without authentication for remote code execution or authentication bypass.
Vulnerabilities
SolarWinds Serv-U is affected by vulnerabilities that can be exploited for remote code execution.
Vulnerabilities
CVE-2025-26399 is a patch bypass of CVE-2024-28988, which is a patch bypass of the exploited CVE-2024-28986.
M&A Tracker
SolarWinds will become a privately held company following its acquisition by Turn/River Capital for $4.4 billion in cash.
Government
The SEC announces penalties against Unisys, Avaya, Check Point and Mimecast for downplaying the impact of the SolarWinds Orion hack.
Vulnerabilities
SolarWinds has announced patches for a critical-severity remote code execution vulnerability in Access Rights Manager.
Vulnerabilities
SolarWinds has issued a second Web Help Desk hotfix to remove hardcoded credentials after patching a critical-severity vulnerability last week.
Vulnerabilities
The US cybersecurity agency CISA warns that a recent SolarWinds Web Help Desk vulnerability has been exploited in the wild.
Vulnerabilities
SolarWinds has released a hotfix for a critical Java deserialization remote code execution vulnerability in Web Help Desk.
CISO Strategy
Judge dismissed SEC lawsuit charging SolarWinds and CISO Timothy Brown with hiding security problems before and after the SUNBURST supply chain compromise.
Vulnerabilities
SolarWinds has released patches for 13 vulnerabilities in Access Rights Manager, including eight critical bugs.
Vulnerabilities
Threat actors are exploiting a recent path traversal vulnerability in SolarWinds Serv-U using public PoC code.
Vulnerabilities
SolarWinds has released patches for high-severity vulnerabilities in Serv-U and the SolarWinds Platform.
Incident Response
Microsoft says the Midnight Blizzard APT group may still be poking around its internal network after stealing source code, spying on emails.
CISO Strategy
The SEC filed charges against SolarWinds and its CISO over misleading investors about its cybersecurity practices and known risks.
Artificial Intelligence
The incident involved a testing environment set up by Irregular, similar to what Anthropic reported last week.
Vulnerabilities
Mobile & Wireless
Malware & Threats
Cybercrime
Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada.
Artificial Intelligence
Artificial Intelligence
Vulnerabilities