SolarWinds security advisory (AV26-165)

Serial number: AV26-165
Date: February 24, 2026

On February 24, 2026, SolarWinds published security advisories to address critical vulnerabilities in the following product:

• SolarWinds Serv-U - versions prior to 15.5.4

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability (CVE-2025-40538)
• SolarWinds Security Vulnerabilities