CRITICAL 9.8 NVD
CVE-2026-28324
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.
References
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-c
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes
- https://documentation.solarwinds.com/en/success_center/wpm/content/orionwpmagaddingalocati
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28324
This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-09-22 via NVD.
Risk Timeline
CVE Disclosed2026-09-22 · -1 days ago
Remediation Resources
Official Advisory
www.solarwinds.com/trust-center/security-advisories/CVE-2026-28324
vulnfeed aggregates 13417 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.