https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:59:07.057278+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14376 bdu:2026-14376 2026-10-02T09:59:07.120302+00:00 bdu:2026-14376 https://cve.radiocsirt.org/vuln/euvd-2026-340439 EUVD-2026-340439 2026-10-02T09:59:07.120341+00:00 EUVD-2026-340439 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28313 fkie_cve-2026-28313 2026-10-02T09:59:07.120357+00:00

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. The impact is lower in Windows deployments.

 https://cve.radiocsirt.org/vuln/ghsa-wpw8-5vq9-3rp5 GHSA-wpw8-5vq9-3rp5 2026-10-02T09:59:07.120387+00:00

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. The impact is lower in Windows deployments.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0265 NCSC-2026-0265 — Kwetsbaarheden verholpen in SolarWinds Serv-U 2026-10-02T09:59:07.120403+00:00 NCSC-2026-0265 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2467 WID-SEC-W-2026-2467 — SolarWinds Serv-U: Mehrere Schwachstellen 2026-10-02T09:59:07.120430+00:00

Ein entfernter, hochprivilegierter Angreifer kann mehrere Schwachstellen in SolarWinds Serv-U ausnutzen, um beliebigen Code als Root auszuführen, Administratorrechte zu erlangen, Konten zu übernehmen, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.