SolarWinds Observability Self-Hosted before 2026.4 has broken authorization
Canada’s Cyber Centre points administrators to CVE-2026-28328 and says to apply SolarWinds updates when available.
42
Canada’s Cyber Centre points administrators to CVE-2026-28328 and says to apply SolarWinds updates when available.
Canadian Cyber Centre advisory warns of unauthenticated and authenticated RCE flaws in SolarWinds Observability Self-Hosted.
SolarWinds patches critical CVEs allowing unauthenticated RCE on Observability Self-Hosted servers in non-default configs.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views