{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T15:39:53.981","vulnerabilities":[{"cve":{"id":"CVE-2025-40538","sourceIdentifier":"psirt@solarwinds.com","published":"2026-02-24T08:16:27.627","lastModified":"2026-06-17T09:21:43.630","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary code as a privileged account via domain admin or group admin privileges.\n\nThis issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default."},{"lang":"es","value":"Hay una vulnerabilidad de control de acceso roto en Serv-U que, cuando se explota, le da a un actor malicioso la capacidad de crear un usuario administrador del sistema y ejecutar código arbitrario como una cuenta privilegiada a través de privilegios de administrador de dominio o de grupo.\n\nPara explotar este problema es preciso disponer de privilegios de administrador. En implementaciones de Windows, el riesgo se califica como medio porque los servicios con frecuencia se ejecutan bajo cuentas de servicio con menos privilegios por defecto."}],"affected":[{"source":"psirt@solarwinds.com","affectedData":[{"vendor":"SolarWinds","product":"Serv-U","defaultStatus":"affected","platforms":["Windows","Linux"],"versions":[{"version":"SolarWinds Serv-U 15.5.3 and prior versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@solarwinds.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-25T04:55:30.568444Z","id":"CVE-2025-40538","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@solarwinds.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*","versionEndExcluding":"15.5.4","matchCriteriaId":"0879DDA2-3F57-41C7-A689-4B904310687E"}]}]}],"references":[{"url":"https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4_release_notes.htm","source":"psirt@solarwinds.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40538","source":"psirt@solarwinds.com","tags":["Vendor Advisory"]}]}}]}