CVE-2025-40548

Name of the Vulnerable Software and Affected Versions Serv-U versions 15.5.2 and prior

Description A flaw exists in Serv-U due to a missing validation process. This can allow an attacker with administrative privileges to execute code on a vulnerable system. The risk is considered medium on Windows deployments because services often run under less-privileged service accounts. The vulnerability requires administrative privileges to exploit.

Recommendations Serv-U versions prior to 15.5.2 should be updated.