Live › vulnerability › CVE-2021-35211
Go to dashboardSolarWinds Serv-U, a managed file transfer server, has a memory escape flaw that lets a remote attacker run code on the server. CISA lists it as actively exploited, and the KEV entry notes known ransomware use.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| SolarWinds Serv-U | vendor | – | – |
Identify Serv-U installs and their versions in the admin console or the installed package; the affected and fixed version ranges are unknown from the sources.
Apply the vendor's updates per SolarWinds instructions (per CISA required action); the specific fixed version is unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability.
This page as .md · .json · in your agent: get_signal("CVE-2021-35211")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.