Threat actors are exploiting a recent path traversal vulnerability in SolarWinds Serv-U using public PoC code.