Vulnerability in SolarWinds Observability Self-Hosted

[ Why it matters ]Priority signals

• Critical severity: CVSS 9.8

[ Description ]Official description

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.

[ Fixes ]Fixes and patches

• Security bulletin: SolarWinds cve-2026-28331Vendor patch or bulletin · CERT-FR · solarwinds.com/trust-center/security-advisories/cve-2026-28331, cited by CERT-FR CERTFR-2026-AVI-1364
• Security bulletin: SolarWinds cve-2026-28328Vendor patch or bulletin · CERT-FR · solarwinds.com/trust-center/security-advisories/cve-2026-28328, cited by CERT-FR CERTFR-2026-AVI-1364
• Security bulletin: SolarWinds cve-2026-28329Vendor patch or bulletin · CERT-FR · solarwinds.com/trust-center/security-advisories/cve-2026-28329, cited by CERT-FR CERTFR-2026-AVI-1364
• Security bulletin: SolarWinds cve-2026-28330Vendor patch or bulletin · CERT-FR · solarwinds.com/trust-center/security-advisories/cve-2026-28330, cited by CERT-FR CERTFR-2026-AVI-1364
• Security bulletin: SolarWinds cve-2026-28324Vendor patch or bulletin · CERT-FR · solarwinds.com/trust-center/security-advisories/cve-2026-28324, cited by CERT-FR CERTFR-2026-AVI-1215
• Security bulletin: SolarWinds cve-2026-28325Vendor patch or bulletin · CERT-FR · solarwinds.com/trust-center/security-advisories/cve-2026-28325, cited by CERT-FR CERTFR-2026-AVI-1215

[ Advisories ]Government CERT advisories

• CERT-FR22 Oct 2026CERTFR-2026-AVI-1364

  Multiple vulnerabilities in SolarWinds products Translated from French

  Multiple vulnerabilities have been discovered in SolarWinds products. Some of them allow an attacker to cause privilege escalation, server-side request forgery (SSRF) and remote cross-site scripting (XSS).

  CVE-2026-28331CVE-2026-28330CVE-2026-28328+3 more CVEs
• NCSC-NL23 Sep 2026NCSC-2026-0388

  Vulnerabilities fixed in SolarWinds Observability Self-Hosted Translated from Dutch

  Probability/damage M/HCVE-2026-28325CVE-2026-28324
• CERT-FR23 Sep 2026CERTFR-2026-AVI-1215

  Multiple vulnerabilities in SolarWinds Observability Self-Hosted Translated from French

  Multiple vulnerabilities have been discovered in SolarWinds Observability Self-Hosted. They allow an attacker to cause remote arbitrary code execution.

  CVE-2026-28325CVE-2026-28324

[ References ]References

• documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_…release-notes
• www.solarwinds.com/trust-center/security-advisories/CVE-2026-28324vendor-advisory
• documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-config…x_secure-configuration-guide
• documentation.solarwinds.com/en/success_center/wpm/content/orionwpmagaddingalocation.htmmitigation