CVE-2021-35211—SolarWinds Serv-U Remote Code Execution Vulnerability

Vulnerability Name

SolarWinds Serv-U Remote Code Execution Vulnerability

Description

SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

• https://nvd.nist.gov/vuln/detail/CVE-2021-35211

Related News Articles

• CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318)June 8, 2026
• CISA: Hackers now exploit SolarWinds Serv-U flaw to crash serversJune 5, 2026
• SolarWinds Patches 4 Critical Serv-U 15.5 Flaws Allowing Root Code ExecutionFebruary 25, 2026
• Critical SolarWinds Serv-U flaws offer root access to serversFebruary 24, 2026

Related Weaknesses

• CWE-787