PlatformPlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
high·Misconfiguration·Updated Dec 1, 2025

SolarWinds Serv-U FTP - Remote Code Execution

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
2.7k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVECVE-2021-35211
9.0
CVSScritical
Exploitable remotely over the internet · no authentication required.

Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
Serv-U Managed File Transfer Server and Serv-U Secured FTPby SolarWinds
AFFECTED< 15.2.3 HF1→SAFE ✓≥ 15.2.3 HF1
Updated Sep 9, 2026View on NVD →
Similar Tools
medium
9Router - Default Login
→high
Cluster Overview Trino - Admin Login
→medium
N8n - Config
→medium
Redis Commander - Default Login
→medium
SweetRice CMS 1.5.1 - Backup Disclosure
→medium
PrestaShop - Information Disclosure
→critical
Langflow AI <= 1.6.9 - CORS Misconfiguration
→high
Citrix NetScaler SAML IDP - Memory Overread
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.