CVE-2026-28324

CriticalCVSS 9.8

Published: 22/09/2026(UTC)Translated: 23/09/2026(UTC)NVD NIST

Summary

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.

Risk Assessment

An unauthenticated attacker could remotely execute arbitrary code in the application context, potentially leading to full system compromise.

Recommendation

Verify installation configuration, ensure non-secure settings are not used, and apply available vendor security updates.

Other vulnerabilities in SolarWinds Observability Self-Hosted

CVE-2026-28325High
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability stemming from deserialization of untrusted data when the application is configured to use a specific communication mode.

Original NVD description (English source)

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.