← CVE Radar
CVE-2026-28324SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.
9.8 CRITICALEPSS 0.65%Not in KEVNVD: Awaiting Analysis
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1SolarWinds (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2026-28324
- Status
- Awaiting Analysis
- Assigner (CNA)
- SolarWinds
- Published
- Sep 22, 2026
- Last modified
- 2026-09-24 21:00 UTC
- Weaknesses
- CWE-345 · Insufficient Verification of Data Authenticity
Affected Products
As published by the CNA in the CVE record.
SolarWindsObservability Self-Hosted1 version range
- before 2026.2.3
References
- documentation.solarwinds.com https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm
- documentation.solarwinds.com https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-2-3_release_notes.htm
- documentation.solarwinds.com https://documentation.solarwinds.com/en/success_center/wpm/content/orionwpmagaddingalocation.htm
- solarwinds.com https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28324