How serious is CVE-2025-40541?

This vulnerability has a CVSS score of 7.2 out of 10, classified as HIGH severity. Proof-of-concept exploit code is publicly available, making this an active threat.

Is there exploit code available for CVE-2025-40541?

Yes, proof-of-concept exploit code for CVE-2025-40541 is publicly available on GitHub and security research platforms. This increases the risk of active exploitation.

Which products are affected by CVE-2025-40541?

CVE-2025-40541 affects solarwinds serv-u. Check the full CVE details for specific version information.

How do I fix CVE-2025-40541?

To remediate CVE-2025-40541, check for security patches from solarwinds. Apply all available updates and security patches. If no patch is available, implement recommended workarounds or security controls to mitigate the risk.

CVE-2025-40541

High

|7.2

Exploit Available

Plain English Summary

AI-powered analysis for quick understanding

This vulnerability allows an attacker to run harmful code on the system as a privileged user, potentially taking full control of the Serv-U software. However, the attacker must already have administrative access to exploit this weakness, which makes it less risky on Windows systems where services typically run with lower privileges.

Technical Description

An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default.

CVSS Vector Analysis

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredHigh

User InteractionNone

Confidentiality ImpactHigh

Integrity ImpactHigh

Availability ImpactHigh

ScopeUnchanged

Vector String

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploit Resources

Search for proof-of-concept code and exploit modules

GitHub Search Exploit-DB Nuclei Templates Metasploit Vulners

Official References

NIST NVD

Est. Bounty

$1,421($1K-$5K)

Vendor Response

Grade APatched in 0 days

Quick Information

Published

Feb 24, 2026

about 1 month ago

Last Modified

Feb 24, 2026

about 1 month ago

Vendor

solarwinds

Product

serv-u

Related Vulnerabilities

CVE-2025-40540High

This vulnerability allows an attacker to run any code they choose with high-level permissions on the affected system. However, they need to have administrative access to exploit it, which makes it less risky on Windows systems where services often run with lower privileges by default.

CVE-2025-40539High

This vulnerability allows an attacker to run any code they choose with high-level privileges on the affected system. However, they need to have administrative access to exploit it, which makes it less risky on Windows systems where services often run with lower privileges by default.

CVE-2025-40538High

This vulnerability allows an attacker with administrative privileges to create a system admin user and run any code they want with high-level permissions. While it poses a significant risk, it can only be exploited by someone who already has admin access to the system.

CVE-2025-26399Critical

This vulnerability allows an attacker to run commands on the host machine without needing to log in, making it extremely dangerous. It takes advantage of flaws in the SolarWinds Web Help Desk software that were supposed to be fixed in previous updates, meaning that even patched systems could still be at risk.