Threat actors are actively exploiting SolarWinds Serv-U bug CVE-2024-28995

Threat actors are actively exploiting a recently discovered vulnerability in SolarWinds Serv-U software using publicly available proof-of-concept (PoC) code. Threat actors are actively exploiting a recently discovered vulnerability, tracked as CVE-2024-28995, in SolarWinds Serv-U software. The vulnerability CVE-2024-28995 is a high-severity directory transversal issue that allows attackers to read sensitive files on the host machine. […]

attackers breaking news bug code concept cve cve-2024 cve-2024-28995 directory exploiting files hacking high information security news issue it information security pierluigi paganini poc proof proof-of-concept security sensitive serv-u severity software solarwinds solarwinds serv-u threat threat actors using vulnerability