Splunk and SolarWinds patch code execution and access flaws
Fixes cover 16 product CVEs in Splunk Enterprise, 15 in SOAR, plus Observability and Patch Manager bugs.
66
CVE-2026-28328
Broken authorization in SolarWinds Observability Self-Hosted
- CVSS 3.1
- 8.8 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
SolarWinds Observability Self-Hosted has a broken authorization schema. A low-privileged user on the network can access and modify information beyond assigned permissions, without further user interaction. Impact covers confidentiality, integrity, and availability of data the account should not control. SolarWinds has not listed affected builds.
What to do: Apply SolarWinds' security update for CVE-2026-28328. No fixed version or workaround is stated.
| Product | Affected |
|---|---|
| SolarWinds Observability Self-Hosted | — |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions.
- Weakness
- CWE-863
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news
2 storiesSolarWinds Observability Self-Hosted before 2026.4 has broken authorization
Canada’s Cyber Centre points administrators to CVE-2026-28328 and says to apply SolarWinds updates when available.
42