CVE Catalog
CVE-2026-28325
HighCVSS 8.8Summary
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability stemming from deserialization of untrusted data when the application is configured to use a specific communication mode.
Risk Assessment
An unauthenticated attacker can execute arbitrary code on the server, potentially leading to full compromise of the system and data.
Recommendation
It is recommended to review the communication mode configuration and apply available patches or updates from the vendor.
Other vulnerabilities in SolarWinds Observability Self-Hosted
Original NVD description (English source)
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability stemming from deserialization of untrusted data when the application is configured to use a specific communication mode.