CISA Flags Actively Exploited SolarWinds Serv-U Vulnerability

Author

Taylor Hawes
June 08, 2026

IT auditing, security, and compliance simplified

ADAudit Plus delivers unified visibility across Active Directory, Entra ID, Microsoft 365, Windows servers, workstations, and file servers (Windows, NetApp, EMC, and more). Pre-configured reports, real-time alerts, and built-in analytics ensure you spend less time setting things up and more time staying secure and compliant.

🔎 Cyber Watch 🔎

CISA Flags Actively Exploited SolarWinds Serv-U Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a SolarWinds Serv-U vulnerability, tracked as CVE-2026-28318, to its Known Exploited Vulnerabilities (KEV) catalog after confirming active exploitation. The flaw allows unauthenticated attackers to crash vulnerable Serv-U servers through specially crafted HTTP requests, disrupting file transfer operations. A patch is available in Serv-U 15.5.4 HF1.

Key takeaways

  • CVE-2026-28318 is being actively exploited in the wild.

  • The vulnerability requires no authentication.

  • Affected organizations face potential service outages and business disruption.

  • SolarWinds has released a fix in version 15.5.4 HF1.

  • Security teams should prioritize patching any internet-facing Serv-U deployments.

🎙️ Tech Briefing On‑Air 🎙️

How Washington Evaluates Chinese Technology

Former U.S. government official Liz Cannon offered insight into how American policymakers assess Chinese technology companies. The discussion highlights a shift from evaluating products solely on technical merit toward examining ownership structures, state influence, supply chain dependencies, data access, and national security implications. The result is a broader risk-based framework that increasingly shapes procurement decisions, investment reviews, and technology restrictions.

Takeaways

  • Governments are examining geopolitical risk alongside technical capabilities.

  • Data access and potential state influence remain major concerns.

  • Supply chain resilience is becoming a core purchasing factor.

  • Technology decisions are increasingly linked to national security policy.

  • Businesses operating globally may face growing compliance and procurement challenges.

🤝 Partner Intel 🤝

Strengthening Active Directory Security with ManageEngine ADAudit Plus

ManageEngine ADAudit Plus helps organizations monitor, audit, and report on changes across Active Directory, file servers, and critical Windows environments. The platform provides detailed visibility into user activity, privilege changes, logon events, and security policy modifications, helping security teams detect suspicious behavior before it escalates into a larger incident.

Key Features

  • Tracks privileged account activity in real time.

  • Supports compliance reporting requirements.

  • Helps investigate insider threats and unauthorized changes.

  • Provides visibility into Active Directory misconfigurations.

  • Reduces the time required for forensic investigation.

🤖 AI Runtime 🤖

Lawmakers Examine AI Security Risks

A House Subcommittee on Cybersecurity and Infrastructure Protection hearing focused on the security implications of advanced AI systems. Witnesses discussed risks including vulnerability discovery, offensive cyber capabilities, infrastructure protection, and the need for clearer governance frameworks. The hearing reflects growing concern that AI security must advance at the same pace as AI adoption.

📊 By the Numbers 📊

🗳️ Your Monday Take 🗳️

Cast your vote on our weekly poll.

Which cybersecurity decision would create the biggest long-term risk if left unchanged for the next five years?

Login or Subscribe to participate in polls.

📩 We’ll share the results in the Friday issue.

Advertise with Comparitech
Does your business offer services or products in cybersecurity? Get your product seen by IT leaders and professionals.

Advertise with us →

Until Wednesday’s edition - Let’s keep that zero-day count at zero!