Digital Warfare Podcast Daily Brief June 06, 2026

The Digital Warfare Podcast · Jun 6, 2026 · 5m · transcript

Summary

CISA added CVE-2026-28318, a high-severity denial-of-service vulnerability in SolarWinds Serv-U file transfer software, to its Known Exploited Vulnerabilities catalog on June 5, 2026, confirming active exploitation in the wild. The flaw allows unauthenticated remote attackers to crash the Serv-U service by sending a specially crafted HTTP POST request with a Content-Encoding: deflate header, forcing the service to exhaust system resources during decompression. No credentials or user interaction are required. SolarWinds has released Serv-U 15.5.4 Hotfix 1 to address the issue, and…