GreyNoise Warns of Active Exploitation Attempts Targeting SolarWinds Serv-U Vulnerability (CVE-2024-28995)

On June 5, 2024, SolarWinds issued a critical advisory regarding a newly discovered path-traversal vulnerability in Serv-U, identified as CVE-2024-28995. The vulnerability, found by Hussein Daher, affects SolarWinds Serv-U versions 15.4.2 HF 1 and...