#solarwinds

Analysis · Jun 8, 2026 · Colten Anderson

A crash got a federal patch deadline. Here's why that's the right call

CVE-2026-28318 is a 7.5 denial-of-service bug in SolarWinds Serv-U, the kind that usually waits. CISA listed it on KEV two days after the fix shipped. The prioritization logic behind that is the story.