CISA Adds DoS Vulnerability in SolarWinds Serv‑U (CVE‑2026‑28318) to KEV — What to Do?

Colleagues, please note a cybersecurity incident: CISA has added a DoS vulnerability in SolarWinds Serv‑U (CVE‑2026‑28318) to the KEV catalog; reports indicate active exploitation.

Key points:
- The flaw allows DoS via specially crafted POST requests with Content‑Encoding: deflate, causing service crash.
- Fix: Serv‑U 15.5.4 HF1. Mitigations: restrict IP access and block requests with the Content‑Encoding header.
- CISA requires federal agencies to remediate by 19 June 2026. Serv‑U has previously been abused by ransomware actors.

Why it matters: file-transfer services are often externally accessible — the DoS and past exploits raise the risk of downtime and compromise.

What mitigation will you implement in the coming days?

#cybersecurity #vulnerabilities #SolarWinds #infosec