Product by SolarWinds

SolarWinds Observability Self-Hosted

11 known vulnerabilities in SolarWinds Observability Self-Hosted (SolarWinds), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in SolarWinds Observability Self-Hosted (SolarWinds)

High	CVE-2026-28325	SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability also in 1 other product	8.8	22.09.2026
Critical	CVE-2026-28324	SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability also in 1 other product	9.8	22.09.2026
High	CVE-2025-26397	SolarWinds Observability Self-Hosted: Deserialization of Untrusted Data also in 1 other product	7.8	24.07.2025
High	CVE-2026-28297	SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability also in 1 other product	6.1	26.03.2026
High	CVE-2026-28298	SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability also in 1 other product	5.9	26.03.2026
High	CVE-2025-26395	SolarWinds SWOSH DOM-based reflective XSS Vulnerability also in 1 other product	7.1	10.06.2025
Medium	CVE-2025-26391	SolarWinds Observability Self-Hosted XSS Vulnerability also in 1 other product	5.4	18.11.2025
Medium	CVE-2026-28301	SolarWinds Observability Self-Hosted Open Redirect Vulnerability	4.8	09.06.2026
Medium	CVE-2025-26392	SolarWinds Observability Self-Hosted SQL Injection Vulnerability	5.4	21.10.2025
Medium	CVE-2025-40545	SolarWinds Observability Self-Hosted Open Redirection Vulnerability also in 1 other product	4.8	18.11.2025
Medium	CVE-2025-26394	SolarWinds SWOSH Open Redirection Vulnerability also in 1 other product	4.8	10.06.2025