A vulnerability marked as critical has been reported in SolarWinds Serv-U. The impacted element is an unknown function. The manipulation leads to improper privilege management.
This vulnerability is traded as CVE-2025-40538. It is possible to initiate the attack remotely. There is no exploit available.