InfoSecBulletin Cybersecurity for mankind
New vulnerabilities in SolarWinds Serv-U pose serious risks by allowing attackers to gain full control of the system. SolarWinds has revealed four critical Remote Code Execution (RCE) flaws, each with a CVSS score of 9.1.
The vulnerabilities in Serv-U 15.5.4 include Broken Access Control, Type Confusion, and Insecure Direct Object Reference (IDOR). If exploited, these flaws allow attackers to execute arbitrary code as the root user.
Meta’s louisiana data center to exceed 250 billion price tag
Ransomware Crisis in 2026: 5,064 Organizations Affected in 135 Countries
Palo Alto Networks Addresses 13 Vulnerabilities
Critical Dell BIOS & Zimbra Flaws Expose Enterprise Systems
CoLoCity Launches New 1.0 MW Data Center Facility at Gulshan
Daily Cyber security update for 10. 07. 2026
How Hacker Compromise AWS Cloud Environment Using AI in 72 Hours
Mycelium Framework: First AI-as-a-Service Botnet
CrowdStrike Shows 5 New Prompt Injection Techniques for AI Agents
Critical GCP Dialogflow Vulnerability Allows Malicious Code Injection
CVE-2025-40538 is a serious vulnerability due to broken access control, enabling attackers to gain complete control of the system.
According to the release notes, “A broken access control vulnerability exists in Serv-U which, when exploited, gives an attacker the ability to create a system admin user and execute arbitrary code as root via domain admin or group admin privileges.”
By allowing an attacker to artificially mint their own system administrator credentials, this flaw bypasses traditional perimeter defenses and grants persistent, highly privileged access.
The remaining three vulnerabilities are equally critical, offering alternative routes to root-level remote code execution:
CVE-2025-40539 & CVE-2025-40540 (Type Confusion): Two vulnerabilities arise from memory safety issues. If exploited, they can let an attacker manipulate memory management to run arbitrary code as root.
CVE-2025-40541 (IDOR): An Insecure Direct Object Reference (IDOR) vulnerability allows unauthorized data access. In this case, a flaw in Serv-U can lead to remote code execution with root privileges.
Managed file transfer (MFT) solutions like Serv-U are often directly accessible on the public internet for external file sharing, making them attractive targets for initial access brokers and ransomware attackers.
SolarWinds Serv-U 15.5.4 addresses four critical CVEs. Administrators should update immediately to prevent unauthorized root access.
