Known vulnerabilities in Serv-U MFT Server

Vendor: SolarWinds
Software: Serv-U MFT Server
Software CPE: cpe:2.3:a:solarwinds:serv-u_mft_server:*:*:*:*:*:*:*:*
Website: https://www.solarwinds.com/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Serv-U MFT Server Serv-U MFT Server is affected by 4 known vulnerabilities: 4 high Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123152 - Improper Access Control
CVE-2025-40541		 CWE-284 High
No
No
 15.5.4 24.02.2026 SB2026022404
#VU123150 - Type confusion
CVE-2025-40539		 CWE-843 High
No
No
 15.5.4 24.02.2026 SB2026022404
#VU123147 - Type confusion
CVE-2025-40540		 CWE-843 High
No
No
 15.5.4 24.02.2026 SB2026022404
#VU123145 - Improper Access Control
CVE-2025-40538		 CWE-284 High
No
No
 15.5.4 24.02.2026 SB2026022404