OS
Product
Observability Self-Hosted
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 6Low 0
Watch
Add Observability Self-Hosted to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28324 | 9.8 | Sep 22 | SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability Affected: before 2026.2.3 |
| CVE-2026-28325 | 8.8 | Sep 22 | SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability Affected: before 2026.2.3 |
| CVE-2026-28297 | 8.7 | Mar 26 | SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability Affected: before 2026.1.1 |
| CVE-2026-28298 | 8.1 | Mar 26 | SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability Affected: before 2026.1.1 |
| CVE-2025-26397 | 7.8 | Jul 24 | SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability Affected: before 2025.2.1 |
| CVE-2025-26391 | 5.4 | Nov 18 | SolarWinds Observability Self-Hosted XSS Vulnerability Affected: before 2025.4.1 |
| CVE-2026-28301 | 4.8 | Jun 9 | SolarWinds Observability Self-Hosted Open Redirect Vulnerability Affected: 2026.1 and previous versions |
| CVE-2025-26394 | 4.8 | Jun 10 | SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability Affected: before 2025.2 |
| CVE-2025-26392 | 4.6 | Oct 21 | SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account Affected: before 2025.4 |
| CVE-2025-40545 | 4.4 | Nov 18 | SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability Affected: before 2025.4.1 |
| CVE-2025-26395 | 4.3 | Jun 10 | SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL Affected: before 2025.2 |
Showing 11