CISA: Hackers now exploit SolarWinds Serv-U flaw to crash servers
Source Bleeping Computer
Mentioned vulnerabilities
Rated High by Bleeping Computer
Data as of 7 Jun 2026, 21:48 UTC
What to do
AI-suggested
SolarWinds has released Serv-U 15.5.4 Hotfix 1 as an official fix for this vulnerability; applying this patch is the primary remediation. For organizations unable to immediately patch, SolarWinds recommends limiting access to known IP addresses and blocking any POST requests containing the "content-encoding" header, as the vulnerable Serv-U service does not require this functionality. CISA mandates U.S. federal agencies to patch by June 19, 2026, and urges all network defenders to secure their environments accordingly. No other mitigations are indicated by the vendor or CISA.
Description
CISA warned today that hackers are now actively exploiting a recently patched high-severity SolarWinds Serv-U flaw to crash servers. [...]