sign in--:--:--UTC

CVE-2026-28318

exploited in the wild

CVSS

7.5

Reports

5

First seen

Jun 5

Last seen

Jun 8

Affected product

SolarWinds Serv-U

Associated actors

Agrius ×1 BlackToad ×1 Clop ×1 DEV-0322 ×1 Doppelganger ×1 Handala ×1 Miasma ×1 MuddyWater ×1 Nimbus Manticore ×1 OP-512 ×1 Pink ×1 ShinyHunters ×1 TA4922 ×1

Recent reports

Check Point Threat Intelligence Report – June 2025 Breaches, Vulnerabilities, and AI Threats

Check Point ResearchJun 8 High

Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More

The Hacker NewsJun 8 High

CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog

The Hacker NewsJun 6 High

CISA Warns of Active Exploitation of SolarWinds Serv-U Denial-of-Service Flaw

Bleeping ComputerJun 5 High

CISA Adds CVE-2026-28318 SolarWinds Serv-U Vulnerability to Known Exploited Catalog

CISA AdvisoriesJun 5

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans