Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2024-28995

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.

CVSS 8.6 · HighBuzz score 64.4KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 64.4

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 26.4 · diversity 13.0 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
26.4
13 evidence mentions in the snapshot
Diversity score
13.0
4 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
13 source links · newest first
  • CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318)Help Net Security

    A vulnerability (CVE-2026-28318) that can be exploited to crash SolarWinds Serv-U file transfer servers is being leveraged by attackers in the wild, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed on Friday. The agency has ordered US federal civilian agencies to address it by June 19, 2026, either by implementing a patch or implementing mitigations. About CVE-2026-28318 CVE-2026-28318 is an uncontrolled resource consumption vulnerability that can be triggered by remote, unauthenticated attackers. The flaw … More →

    newswww.helpnetsecurity.comJun 8, 2026, 10:26 AM
  • SolarWinds patches four critical Serv-U flaws enabling root accessSecurity Affairs

    SolarWinds addressed four critical Serv-U vulnerabilities that could let attackers gain root access to unpatched servers. SolarWinds released updates fixing four critical Serv-U vulnerabilities that allow remote code execution, potentially giving attackers full root access on unpatched servers. Serv-U is a file transfer server software that allows organizations to securely transfer files over networks using […]

    newssecurityaffairs.comFeb 24, 2026, 8:07 PM
  • What Are Hackers Searching for in SolarWinds Serv-U (CVE-2024-28995)?GreyNoise

    Discover how GreyNoise’s honeypots are monitoring exploit attempts on the SolarWinds Serv-U vulnerability (CVE-2024-28995). Gain insights into the specific files attackers target and how real-time data helps security teams focus on true threats. Read our full blog for detailed analysis.

    vendorwww.greynoise.ioSep 30, 2024, 12:00 AM
  • U.S. CISA adds Adobe Commerce and Magento, SolarWinds Serv-U, and VMware vCenter Server bugs to its Known Exploited Vulnerabilities catalogSecurity Affairs

    U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe Commerce and Magento, SolarWinds Serv-U, and VMware vCenter Server bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Below are the descriptions of the flaws added to the KEV catalog: […]

    newssecurityaffairs.comJul 21, 2024, 8:28 AM
  • Recent Adobe Commerce Vulnerability Exploited in WildSecurityWeek

    Adobe and CISA warn that a recent Adobe Commerce vulnerability has been exploited in the wild.

    newswww.securityweek.comJul 18, 2024, 1:38 PM
  • Security Affairs newsletter Round 478 by Pierluigi Paganini – INTERNATIONAL EDITIONSecurity Affairs

    A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Infosys McCamish Systems data breach impacted over 6 million people A cyberattack shut down the University Hospital Centre […]

    newssecurityaffairs.comJun 30, 2024, 8:47 AM
  • Security Affairs newsletter Round 477 by Pierluigi Paganini – INTERNATIONAL EDITIONSecurity Affairs

    A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. US government sanctions twelve Kaspersky Lab executives Experts found a bug in the Linux version of RansomHub ransomware […]

    newssecurityaffairs.comJun 23, 2024, 9:01 AM
  • Threat actors are actively exploiting SolarWinds Serv-U bug CVE-2024-28995Security Affairs

    Threat actors are actively exploiting a recently discovered vulnerability in SolarWinds Serv-U software using publicly available proof-of-concept (PoC) code. Threat actors are actively exploiting a recently discovered vulnerability, tracked as CVE-2024-28995, in SolarWinds Serv-U software. The vulnerability CVE-2024-28995 is a high-severity directory transversal issue that allows attackers to read sensitive files on the host machine. […]

    newssecurityaffairs.comJun 23, 2024, 8:23 AM
  • Recent SolarWinds Serv-U Vulnerability Exploited in the WildSecurityWeek

    Threat actors are exploiting a recent path traversal vulnerability in SolarWinds Serv-U using public PoC code.

    newswww.securityweek.comJun 21, 2024, 12:03 PM
  • SolarWinds Serv-U (CVE-2024-28995) exploitation: We see you!GreyNoise

    Discover details about CVE-2024-28995, a path-traversal vulnerability in SolarWinds Serv-U, and see how a honeypot setup revealed diverse exploit attempts, including manual attacks. Learn how attackers bypassed filters and targeted specific files in this co

    vendorwww.greynoise.ioJun 18, 2024, 12:00 AM
  • Week in review: Atlassian Confluence RCE PoC, new Kali Linux, Patch Tuesday forecastHelp Net Security

    Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: High-risk Atlassian Confluence RCE fixed, PoC available (CVE-2024-21683) If you’re self-hosting an Atlassian Confluence Server or Data Center installation, you should upgrade to the latest available version to fix a high-severity RCE flaw (CVE-2024-21683) for which a PoC and technical details are already public. Kali Linux 2024.2 released: 18 new tools, countless updates Kali Linux 2024.2 is now available. It … More →

    newswww.helpnetsecurity.comJun 9, 2024, 8:00 AM
  • SolarWinds fixes severe Serv-U vulnerability (CVE-2024-28995)Help Net Security

    SolarWinds has fixed a high-severity vulnerability (CVE-2024-28995) affecting its Serv-U managed file transfer (MFT) server solution, which could be exploited by unauthenticated attackers to access sensitive files on the host machine. About CVE-2024-28995 Serv-U MFT Server is a widely used enterprise solution that provides secure file transfer and file sharing hosted on Windows and Linux machines. Discovered and reported by Hussein Daher, CVE-2024-28995 is a directory traversal (aka path traversal) vulnerability that affects SolarWinds Serv-U … More →

    newswww.helpnetsecurity.comJun 7, 2024, 4:52 PM
  • SolarWinds Patches High-Severity Vulnerability Reported by NATO PentesterSecurityWeek

    SolarWinds has released patches for high-severity vulnerabilities in Serv-U and the SolarWinds Platform.

    newswww.securityweek.comJun 7, 2024, 10:54 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence
  • CVE-2025-40549

    A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute code on a directory.…

    CVSS 9.1 · Critical
    3 mentions
  • CVE-2024-45711

    SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges given to the authenticated user. This iss…

    CVSS 7.5 · High
  • CVE-2024-28073

    SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited.

    CVSS 8.4 · High
  • CVE-2021-35250

    A researcher reported a Directory Transversal Vulnerability in Serv-U 15.3. This may allow access to files relating to the Serv-U installation and server files. This issue has bee…

    CVSS 7.5 · High
  • CVE-2020-27994

    SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal.

    CVSS 6.5 · Medium
  • CVE-2026-67185

    TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting ../ sequences in the URL path, which are…

    CVSS 8.7 · High
    2 mentions