SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability (CVE-2026-28318)

Summary

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center until a patch has been released in the next version.