--- title: New Serv-U bugs extend SolarWinds’ run of high-severity... description: SolarWinds has patched four critical CVEs in its Serv-U managed file transfer server, all rated at the highest severity. The vulnerabilities—including broken... canonical: https://daily.dev/posts/new-serv-u-bugs-extend-solarwinds-run-of-high-severity-disclosures-iydt5fhky twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: New Serv-U bugs extend SolarWinds’ run of high-severity disclosures | daily.dev og:description: SolarWinds has patched four critical CVEs in its Serv-U managed file transfer server, all rated at the highest severity. The vulnerabilities—including broken... og:url: https://daily.dev/posts/new-serv-u-bugs-extend-solarwinds-run-of-high-severity-disclosures-iydt5fhky og:image: https://api.daily.dev/og/posts/IyDT5fHKY.png og:image:alt: New Serv-U bugs extend SolarWinds’ run of high-severity disclosures og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # New Serv-U bugs extend SolarWinds’ run of high-severity disclosures **[CSO Online](https://daily.dev/sources/csoonline)** · 5 min read · 0 upvotes · 0 comments ## Summary SolarWinds has patched four critical CVEs in its Serv-U managed file transfer server, all rated at the highest severity. The vulnerabilities—including broken access control and type confusion flaws—could allow attackers with existing admin access to create privileged accounts, execute arbitrary code as root, deploy malware, and pivot laterally across environments. Security experts urge immediate patching, log review for prior exploitation, and treating any compromise as a full-system incident. The disclosures continue a pattern of high-severity findings across SolarWinds products, reinforcing the company's status as a high-value target for both criminal and nation-state actors. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CISA: Hackers now exploit SolarWinds Serv-U flaw to crash servers](https://daily.dev/posts/cisa-hackers-now-exploit-solarwinds-serv-u-flaw-to-crash-servers-yw8vsu17o) · BleepingComputer · 0 upvotes · 0 comments - [SolarWinds WHD Attacks Highlight Dangers of Exposed Apps](https://daily.dev/posts/solarwinds-whd-attacks-highlight-dangers-of-exposed-apps-z94gb1r3k) · Dark Reading · 0 upvotes · 0 comments - [Attackers exploiting unpatched Cisco SD-WAN flaw](https://daily.dev/posts/attackers-exploiting-unpatched-cisco-sd-wan-flaw-flftxgm0p) · CSO Online · 0 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber) [View this post on daily.dev](https://daily.dev/posts/new-serv-u-bugs-extend-solarwinds-run-of-high-severity-disclosures-iydt5fhky) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"New Serv-U bugs extend SolarWinds’ run of high-severity disclosures","url":"https://daily.dev/posts/new-serv-u-bugs-extend-solarwinds-run-of-high-severity-disclosures-iydt5fhky","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/new-serv-u-bugs-extend-solarwinds-run-of-high-severity-disclosures-iydt5fhky"},"datePublished":"2026-02-25T02:48:13.111Z","dateModified":"2026-02-26T17:02:05.937Z","description":"SolarWinds has patched four critical CVEs in its Serv-U managed file transfer server, all rated at the highest severity. The vulnerabilities—including broken...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/55a483dad057fe3c6b1496b57c014b14?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/55a483dad057fe3c6b1496b57c014b14?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"CSO Online","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"CSO Online","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/98667e4b5cac46cf9c470819c6cf71cd","url":"https://daily.dev/sources/csoonline"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/new-serv-u-bugs-extend-solarwinds-run-of-high-severity-disclosures-iydt5fhky","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"CSO Online","item":"https://daily.dev/sources/csoonline"},{"@type":"ListItem","position":3,"name":"New Serv-U bugs extend SolarWinds’ run of high-severity disclosures"}]} ```