high·Misconfiguration·Updated Dec 1, 2025

SolarWinds Serv-U FTP - Remote Code Execution

Est. Time~10 seconds

Scan TypeGroup Scan

Targetsdomain, subdomain, ipv4

CostFree

Times Used

continuous scan runs

Continuously Checked

assets under CS

Vulnerabilities Found

confirmed findings

References

github.com↗

🔴

CISA Known Exploited Vulnerability

This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.

CVECVE-2021-35211

9.0

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Affected

Serv-U Managed File Transfer Server and Serv-U Secured FTPby SolarWinds

AFFECTED< 15.2.3 HF1→SAFE ✓≥ 15.2.3 HF1

Updated Nov 10, 2026View on NVD →

Similar Tools

Check your infrastructure.
Right now.

12,000+ scanners. Free to start. No credit card required.

SolarWinds Serv-U FTP - Remote Code Execution

Check your infrastructure.Right now.

Check your infrastructure.
Right now.