What’s Vulnerable › Products

SolarWinds Observability Self-Hosted vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your SolarWinds Observability Self-Hosted version is affected

Latest SolarWinds Observability Self-Hosted vulnerabilities

• CVE-2026-28330 — SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability (CVSS 4.6)
• CVE-2026-28329 — SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF) (CVSS 6.4)
• CVE-2026-28328 — SolarWinds Observability Self-Hosted broken authorization schema (CVSS 8.8)
• CVE-2026-28325 — SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-28324 — SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-28301 — SolarWinds Observability Self-Hosted Open Redirect Vulnerability (CVSS 4.8)
• CVE-2026-28298 — SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability (CVSS 8.1)
• CVE-2026-28297 — SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability (CVSS 8.7)
• CVE-2025-40545 — SolarWinds Observability Self-Hosted Open Redirection Vulnerability (CVSS 4.4)
• CVE-2025-26391 — SolarWinds Observability Self-Hosted XSS Vulnerability (CVSS 5.4)
• CVE-2025-26392 — SolarWinds Observability Self-Hosted SQL Injection Vulnerability (CVSS 4.6)
• CVE-2025-26397 — SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation Vulnerability (CVSS 7.8)
• CVE-2025-26395 — SolarWinds SWOSH DOM-based reflective XSS Vulnerability (CVSS 4.3)
• CVE-2025-26394 — SolarWinds SWOSH Open Redirection Vulnerability (CVSS 4.8)