SolarWinds Observability Self-Hosted vulnerabilities

Product

SolarWinds Observability Self-Hosted

by SolarWinds · last CVE Oct 20, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 4Medium 6Low 0

Severity

Exploitation

Watch

Add SolarWinds Observability Self-Hosted to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-28328	8.8	0%	Oct 20	SolarWinds Observability Self-Hosted broken authorization schema Affected: 2026.2.3 and all previous versions
CVE-2026-28297	8.7	0%	Mar 26	SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability Affected: 2026.1.1 and previous versions
CVE-2026-28298	8.1	0%	Mar 26	SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability Affected: 2026.1.1 and previous versions
CVE-2025-26397	7.8	0%	Jul 24	SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation Vulnerability Affected: 2025.2 and previous versions
CVE-2026-28329	6.4	0%	Oct 20	SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF) Affected: 2026.2.3 and all previous versions
CVE-2025-26391	5.4	0%	Nov 18	SolarWinds Observability Self-Hosted XSS Vulnerability Affected: SolarWinds Observability Self-Hosted 2025.4 and prior versions
CVE-2025-26394	4.8	0%	Jun 10	SolarWinds SWOSH Open Redirection Vulnerability Affected: 2025.1.1 and previous versions
CVE-2026-28330	4.6	0%	Oct 20	SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability Affected: 2026.2.3 and all previous versions
CVE-2025-40545	4.4	0%	Nov 18	SolarWinds Observability Self-Hosted Open Redirection Vulnerability Affected: SolarWinds Observability Self-Hosted 2025.4 and prior versions
CVE-2025-26395	4.3	0%	Jun 10	SolarWinds SWOSH DOM-based reflective XSS Vulnerability Affected: 2025.1.1 and previous versions