CISA Flags SolarWinds Serv-U Flaw as Actively Exploited

A critical flaw in SolarWinds Serv-U is being actively exploited, allowing attackers to crash the service with a specially crafted POST request - no authentication required. This denial-of-service vulnerability, tracked as CVE-2026-28318, can be triggered by a simple HTTP POST request with a malicious Content-Encoding header.

https://osintsights.com/cisa-flags-solarwinds-serv-u-flaw-as-actively-exploited?utm_source=mastodon&utm_medium=social

#Solarwinds #Servu #Cve202628318 #DenialOfService #Contentencoding

CISA Flags SolarWinds Serv-U Flaw as Actively Exploited

Learn how to protect against the actively exploited SolarWinds Serv-U flaw and prevent denial-of-service attacks, read our expert guide now for mitigation steps.

OSINTSights
Serving GZIP compressed Favicon with Netlify

Recently I have been annoyed when my weekly WebPerformance Report email from WebPageTest shows a failure on Compress Transfer. This failure, reported in red was done by just one small file… favicon.ico.

Dariusz Więckiewicz 🇬🇧