Product by SolarWinds
Solarwinds Observability Self-hosted
10 known vulnerabilities in Solarwinds Observability Self-hosted (SolarWinds), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-28328 | SolarWinds Observability Self-Hosted broken authorization schema | 8.8 | |
| Medium | CVE-2026-28329 | SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF) | 6.4 | |
| Medium | CVE-2026-28330 | SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability | 4.6 | |
| High | CVE-2025-26397 | SolarWinds Observability Self-Hosted: Deserialization of Untrusted Data | 7.8 | |
| High | CVE-2026-28297 | SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability | 6.1 | |
| High | CVE-2026-28298 | SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability | 5.9 | |
| High | CVE-2025-26395 | SolarWinds SWOSH DOM-based reflective XSS Vulnerability | 7.1 | |
| Medium | CVE-2025-26391 | SolarWinds Observability Self-Hosted XSS Vulnerability | 5.4 | |
| Medium | CVE-2025-40545 | SolarWinds Observability Self-Hosted Open Redirection Vulnerability | 4.8 | |
| Medium | CVE-2025-26394 | SolarWinds SWOSH Open Redirection Vulnerability | 4.8 |