SecurityThe Hacker Newsabout 16 hours ago
CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog
1 min read
CISA added a high-severity SolarWinds Serv-U DoS flaw to its KEV catalog, citing active exploitation. The vulnerability, CVE-2026-28318, causes service crashes via crafted POST requests. SolarWinds fixed it in version 15.5.4 HF1. CISA requires FCEB agencies to patch by June 19, 2026. Exploitation details and affected instances remain unclear.
Level
Hype check
Tap to vote and see what everyone thinks.
