U.S. CISA adds SolarWinds Serv-U flaw to its Known Exploited Vulnerabilities catalog
2026-06-07T14:51:48Z•e94c74c8bd9877ee8cc4f4c59db74cd9265a57d25907ca3d1f55b28ab4a38837
ai-securitycisa-kevcisco-sd-wancisco-unified-cmcryptocurrency-vulncveemail-relayfast-fluxgamaredonmirasvitprivilege-escalationsolarwinds-serv-ussrfunpatched-vulnerabilitieswinrar-exploit
What happened
Multiple high-impact vulnerabilities and active campaigns were reported: CISA added SolarWinds Serv-U (CVE-2026-28318, CVSS 7.5) and Mirasvit Full Page Cache Warmer (CVE-2026-45247, CVSS 9.3) to its Known Exploited Vulnerabilities catalog. Cisco disclosed serious flaws in SD‑WAN Manager (CVE-2026-20245 — authenticated local file‑upload/command injection leading to root, no patch/workaround yet) and Unified CM (CVE-2026-20230 — unauthenticated SSRF with public PoC). Additional intelligence includes threat actor infrastructure changes (Silent Ransom Group fast‑flux, PCPJack 230‑node cloud email‑
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- e94c74c8bd9877ee8cc4f4c59db74cd9265a57d25907ca3d1f55b28ab4a38837
- Enrichment time
- 2026-06-07T14:51:48Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.