SolarWinds Serv-U is affected by an IDOR vulnerability rated CVSS 9.1 that can lead to privilege escalation and remote code execution as root when group administrator access is available. The flaw, published July 21 2026, carries lower impact on Windows and is addressed in the Serv-U 2026-3 release.
The vulnerability allows privilege escalation and remote code execution as root on affected deployments.
Its impact is lower in Windows deployments compared with Linux.
Enterprise file-transfer teams running Serv-U on Linux should prioritize the 2026-3 upgrade, as the root-level remote code execution risk is materially higher than on Windows.
Tap a lens to see what this story means for you.
Reader-supported · The Brief
Liked this? The Brief brings you the whole day in tech, verified, every morning. Two minutes, free forever.
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
A July 21, 2026 recap highlights Apple's testing of an AI note-taking system for Genius Bar use, scrapped Intel Mac Pro plans, legal letters to ex-employees at OpenAI, and up to 11% iPhone price hikes in Japan. These stories reflect ongoing AI development, hardware strategy shifts, talent retention efforts, and market pricing dynamics.
Apple will launch a new Apple Upgrade leasing program on July 28 according to a Bloomberg report, in partnership with Klarna, offering lower monthly payments on iPhone, iPad, Mac, and Apple Watch purchases with 24- or 36-month terms. The move ends new signups for the existing iPhone Upgrade Program and arrives as the company has raised hardware prices.
A federal judge issued a 14-day restraining order halting the $110 billion Paramount-Warner Bros Discovery merger after a dozen states argued it would violate antitrust laws. The pause prevents immediate irreversible actions and sets an August 3 hearing on a preliminary injunction while exposing Paramount to millions in daily penalties if the deal misses its September 30 deadline.
