Advisories · Technology

SolarWinds Observability Self-Hosted.

Every CVE that names SolarWinds Observability Self-Hosted among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-28330 CVE record

CVSS 4.6 Medium

SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability
- SolarWinds Observability Self-Hosted
- Cross-site scripting (XSS)
Not analysed yet 20 Oct 2026
CVE-2026-28329 CVE record

CVSS 6.4 Medium

SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF)
- SolarWinds Observability Self-Hosted
- Server-side request forgery (SSRF)
Not analysed yet 20 Oct 2026
CVE-2026-28328 CVE record

CVSS 8.8 High

SolarWinds Observability Self-Hosted broken authorization schema
- SolarWinds Observability Self-Hosted
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-28325 CVE record

CVSS 8.8 High

SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability
- SolarWinds Observability Self-Hosted
- Insecure deserialization
Not analysed yet 22 Sept 2026
CVE-2026-28324 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability
- SolarWinds Observability Self-Hosted
- CWE-345
Not analysed yet 22 Sept 2026
CVE-2026-28301 CVE record

CVSS 4.8 Medium

SolarWinds Observability Self-Hosted Open Redirect Vulnerability
- SolarWinds Observability Self-Hosted
- Open redirect
Not analysed yet 9 Jun 2026
CVE-2026-28298 CVE record

CVSS 5.9 Medium

SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability
- SolarWinds Observability Self-Hosted
- Cross-site scripting (XSS)
Not analysed yet 26 Mar 2026
CVE-2026-28297 CVE record

CVSS 6.1 Medium

SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability
- SolarWinds Observability Self-Hosted
- Cross-site scripting (XSS)
Not analysed yet 26 Mar 2026
CVE-2025-40545 CVE record

CVSS 4.8 Medium

SolarWinds Observability Self-Hosted Open Redirection Vulnerability
- SolarWinds Observability Self-Hosted
- Open redirect
Not analysed yet 18 Nov 2025
CVE-2025-26391 CVE record

CVSS 5.4 Medium

SolarWinds Observability Self-Hosted XSS Vulnerability
- SolarWinds Observability Self-Hosted
- Cross-site scripting (XSS)
Not analysed yet 18 Nov 2025
CVE-2025-26392 CVE record

CVSS 5.4 Medium

SolarWinds Observability Self-Hosted SQL Injection Vulnerability
- SolarWinds Observability Self-Hosted
- SQL injection
Not analysed yet 21 Oct 2025
CVE-2025-26397 CVE record

CVSS 7.8 High

SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation Vulnerability
- SolarWinds Observability Self-Hosted
- Insecure deserialization
Not analysed yet 24 Jul 2025
CVE-2025-26395 CVE record

CVSS 7.1 High

SolarWinds SWOSH DOM-based reflective XSS Vulnerability
- SolarWinds Observability Self-Hosted
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-26394 CVE record

CVSS 4.8 Medium

SolarWinds SWOSH Open Redirection Vulnerability
- SolarWinds Observability Self-Hosted
- Open redirect
Not analysed yet 10 Jun 2025