CVE-2025-40538 - Vulnerability Analysis

Overview

Serv-U contains a broken access control vulnerability caused by improper privilege checks, letting attackers with domain or group admin privileges create system admin users and execute arbitrary code.

Severity & Score

Impact

Attackers with admin privileges can create system admin users and execute arbitrary code with elevated privileges.

Mitigation

Update to the latest version with the fix applied.

References

• https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4_release_notes.htm
• https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40538

Social Media Activity(1 post)

Jeff Hall - PCIGuru :verified:

@jbhall56

Feb 27, 2026

All four security defects, tracked as CVE-2025-40538 to CVE-2025-40541, have a CVSS score of 9.1, could result in remote code execution, and impact Serv-U version 15.5. https://www.securityweek.com/solarwinds-patches-four-critical-serv-u-vulnerabilities/

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner