CISA warns of actively exploited SolarWinds Serv-U denial-of-service flaw
CISA reported that hackers are actively exploiting a recently patched high-severity SolarWinds Serv-U vulnerability to crash servers. Tracked as CVE-2026-28318, the flaw allows an unauthenticated remote attacker to crash the Serv-U service with a specially crafted request.
CERT24