Vulnerability Details CVE-2026-28313
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. The impact is lower in Windows deployments.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 26.9%
CVSS Severity
CVSS v3 Score 9.1