SolarWinds Serv-U is affected by an IDOR vulnerability rated CVSS 9.1 that can lead to privilege escalation and remote code execution as root when group administrator access is available. The flaw, published July 21 2026, carries lower impact on Windows and is addressed in the Serv-U 2026-3 release.

The vulnerability allows privilege escalation and remote code execution as root on affected deployments.
Its impact is lower in Windows deployments compared with Linux.
Enterprise file-transfer teams running Serv-U on Linux should prioritize the 2026-3 upgrade, as the root-level remote code execution risk is materially higher than on Windows.
Tap a lens to see what this story means for you.
Reader-supported · The Brief
Liked this? The Brief brings you the whole day in tech, verified, every morning. Two minutes, free forever.
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Tesla revealed the production Cybercab at an Austin event on September 4, 2026, showcasing its unboxed manufacturing process and new hardware components. The two-seater autonomous vehicle uses a pure-vision system with a drag coefficient under 0.20 and omits any immediate plans for individual customer sales.
Tesla began public rides in its steering-wheel-free Cybercab in Austin this evening while NHTSA opened an Audit Query into the company’s determination that the vehicle meets existing federal safety standards. The review targets Tesla’s self-certification at a moment when the agency is revising eight rules for driverless cars and other robotaxi developers have secured exemptions.
Volkswagen's supervisory board has unanimously approved the Future Plan 2030, which includes an additional 50,000 job cuts worldwide to reach a total of around 100,000 and leaves four German plants without secured future vehicle production after 2031-2034. The move aims to reduce costs and improve competitiveness against Chinese rivals, with alternative uses for the factories to be examined by June 2027.