MEDIUM 4.6 NVD
CVE-2026-28330
SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject
SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages.
References
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-c
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28330
This medium severity vulnerability with a CVSS score of 4.6 was published on 2026-10-20 via NVD.
vulnfeed aggregates 18176 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.