SQL Injection Vulnerability in SolarWinds Observability Self-Hosted

CVE-2025-26392

What is CVE-2025-26392?

The Observability Self-Hosted platform from SolarWinds has a vulnerability that allows SQL injection through authenticated low-privilege accounts. This flaw can potentially expose sensitive data, making it crucial for users to apply security patches and monitor their systems for any unusual activities. The vulnerability emphasizes the need for robust security measures even for accounts with minimal access levels.

References