Unauthenticated Remote Code Execution Vulnerability in SolarWinds Observability Self-Hosted
CVE-2026-28324

9.8CRITICAL

Key Information:

Vendor

Solarwinds
Status
Observability Self-hosted
Vendor
CVE Published:
22 September 2026

What is CVE-2026-28324?

An unauthenticated remote code execution vulnerability has been discovered in SolarWinds Observability Self-Hosted. This issue arises due to insufficient integrity checks and primarily affects installations that are configured in non-default and insecure settings. Organizations using this software should ensure they adhere to secure configuration practices to mitigate potential exploitation risks. For detailed guidance, refer to the provided secure configuration guidelines and advisory from SolarWinds.

Affected Version(s)

Observability Self-Hosted 0 < 2026.2.3

References

https://documentation.solarwinds.com/en/success_center/or...
release-notes
https://www.solarwinds.com/trust-center/security-advisori...
vendor-advisory
https://documentation.solarwinds.com/en/success_center/or...
x_secure-configuration-guide

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kai Huang from Armadin
.