Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
9.1 CRITICAL
CVE-2026-28313 — SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. The impact is lower in Windows deploym…

serv-u | Remote | Authorization
Jul 21, 2026 Jul 24, 2026
Jul 21, 2026
Jul 24, 2026
9.1 CRITICAL
CVE-2026-28312 — SolarWinds Serv-U Privilege Escalation Vulnerability

SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code execution as root. The impact is lower in Windows dep…

serv-u | Remote | Authorization
Jul 21, 2026 Jul 24, 2026
Jul 21, 2026
Jul 24, 2026
9.1 CRITICAL
CVE-2026-28310 — SolarWinds Serv-U Privilege Escalation Vulnerability

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a system administrator. The impact is lower in Windows …

serv-u | Remote | Authorization
Jul 21, 2026 Jul 24, 2026
Jul 21, 2026
Jul 24, 2026
9.1 CRITICAL
CVE-2026-28309 — SolarWinds Serv-U Broken Access Control Vulnerability

SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows deployments.

serv-u | Remote | Authorization
Jul 21, 2026 Jul 24, 2026
Jul 21, 2026
Jul 24, 2026
9.1 CRITICAL
CVE-2026-28308 — SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The impact is lower in Windo…

serv-u | Remote | Authorization
Jul 21, 2026 Jul 24, 2026
Jul 21, 2026
Jul 24, 2026
9.1 CRITICAL
CVE-2026-28307 — SolarWinds Serv-U Privilege Escalation Vulnerability

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments.

serv-u | Remote | Authorization
Jul 21, 2026 Jul 24, 2026
Jul 21, 2026
Jul 24, 2026
9.1 CRITICAL
CVE-2026-28306 — SolarWinds Serv-U Privilege Escalation Vulnerability

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is lower in Windows deployme…

serv-u | Remote | Authorization
Jul 21, 2026 Jul 24, 2026
Jul 21, 2026
Jul 24, 2026
9.1 CRITICAL
CVE-2026-28305 — SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root. A domain account with admin privileges and read and write acc…

serv-u | Remote | Authorization
Jul 21, 2026 Jul 24, 2026
Jul 21, 2026
Jul 24, 2026
9.1 CRITICAL
CVE-2026-28304 — SolarWinds Serv-U Remote Code Execution Vulnerability

SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in Windows deployments.

serv-u | Remote | Injection
Jul 21, 2026 Jul 24, 2026
Jul 21, 2026
Jul 24, 2026
9.1 CRITICAL
CVE-2026-28302 — SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execution as root. This issue requires group administra…

serv-u | Remote | Authorization
Jul 21, 2026 Jul 24, 2026
Jul 21, 2026
Jul 24, 2026
4.3 MEDIUM
CVE-2026-16450 — zsadmin2025 ZS-Admin MyBatis-Plus Tenant Plugin page getTenantId authorization

A vulnerability was identified in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This affects the function getTenantId of the file /api/system/sys/dept/page of the component MyB…

zs-admin | Remote | Authorization
Jul 21, 2026 Jul 23, 2026
Jul 21, 2026
Jul 23, 2026
6.5 MEDIUM
CVE-2026-16449 — zsadmin2025 ZS-Admin com.zs.sys.dept.controller.SysDeptController page OrderItem.desc sql…

A vulnerability was determined in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. The impacted element is the function OrderItem.asc/OrderItem.desc of the file /api/system/sys/de…

zs-admin | Remote | Injection
Jul 21, 2026 Jul 22, 2026
Jul 21, 2026
Jul 22, 2026
Showing 20 of 12712 Results