SolarWinds Serv-U Path/Directory Traversal Vulnerability Exploited (CVE-2024-28995)

On June 18, researchers at GreyNoise confirmed in-the-wild exploitation of a high-severity vulnerability in SolarWinds Serv-U FTP and MFT:

• CVE-2024-28995

The flaw was first disclosed as part of an advisory on June 5. Following the publication technical details and proof-of-concept exploit code, exploitation has now been observed.

For more information about the vulnerability, including the availability of patches and Tenable product coverage, please visit our blog.