#SolarWinds
All CosmicBytez Labs articles tagged #SolarWinds, across news, security advisories, how-to guides, and projects.
- News
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
SolarWinds fixed two unauthenticated RCE flaws in Observability Self-Hosted — CVE-2026-28324 (CVSS 9.8) and CVE-2026-28325 (CVSS 8.8) — in version 2026.2.3.
- News
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
CVE-2026-28326 (CVSS 8.8) is a hard-coded static key in SolarWinds Access Rights Manager, patched in ARM 2026.2.1.
- Security
CVE-2026-28302: SolarWinds Serv-U IDOR Leads to Root RCE
A critical CVSS 9.1 vulnerability in SolarWinds Serv-U allows group administrators to exploit an insecure direct object reference flaw to escalate...
- News
CISA: Hackers Now Exploit SolarWinds Serv-U Flaw to Crash Servers
CISA added a high-severity SolarWinds Serv-U flaw to its KEV catalog after confirming attackers are actively exploiting it to crash file transfer servers.
- Security
CVE-2026-28318: SolarWinds Serv-U Uncontrolled Resource Consumption (DoS)
SolarWinds Serv-U contains an unauthenticated DoS vulnerability allowing specially crafted POST requests with Content-Encoding: deflate to crash the service…
- Security
SolarWinds Web Help Desk RCE Vulnerability Added to CISA KEV
Critical deserialization vulnerability in SolarWinds Web Help Desk enables unauthenticated remote code execution. CISA confirms active exploitation.