CISA Issues Alert on Actively Exploited DoS Vulnerability in SolarWinds Serv-U

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a denial-of-service vulnerability in SolarWinds Serv-U file transfer servers is being actively exploited. This flaw allows attackers to remotely crash the service, prompting CISA to mandate federal agencies to apply patches or mitigations by June 19. SolarWinds has already released a hotfix to address the issue.