CVE-2026-28318
HIGH KEVSolarWinds Serv-U Unauthenticated Denial of Service Vulnerability
Title source: cnaExploitation Summary
CVE-2026-28318 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 5, 2026. EIP tracks 4 public exploits from researchers including EaEa0001, BishopFox, jenniferreire26.
AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2026-28318, a memory corruption vulnerability in SolarWinds Serv-U. The exploit triggers a heap corruption crash by sending a crafted HTTP request with 'Content-Encoding: deflate' to the target server.
Description
SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update
Exploits (4)
This repository contains a functional proof-of-concept exploit for CVE-2026-28318, a memory corruption vulnerability in SolarWinds Serv-U. The exploit triggers a heap corruption crash by sending a crafted HTTP request with 'Content-Encoding: deflate' to the target server.
This repository contains a safe, non-destructive scanner for CVE-2026-28318, an unauthenticated denial-of-service vulnerability in SolarWinds Serv-U. The script sends a benign POST request with 'Content-Encoding: identity' to detect the absence of the HF1 patch without triggering the crash.
The repository lacks actual exploit code and instead redirects users to an external download link (tinyurl.com), which is a common tactic for distributing malware or monetizing fake exploits. The README provides minimal technical details about the vulnerability.
The repository lacks actual exploit code and instead redirects users to an external download link (tinyurl.com). The README provides minimal technical details about the vulnerability, focusing on generic descriptions and mitigation steps rather than a technical analysis or functional PoC.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H