SolarWinds Observability Self-Hosted (Product): news timeline & CVEs

SolarWinds security advisory (AV26-950)

Canadian Cyber Centre advisory warns of unauthenticated and authenticated RCE flaws in SolarWinds Observability Self-Hosted.

The Canadian Centre for Cyber Security has issued an advisory for SolarWinds Observability Self-Hosted, warning of two Remote Code Execution vulnerabilities. CVE-2026-28325 is an unauthenticated RCE flaw, while CVE-2026-28324 is an authenticated RCE vulnerability. Users are advised to update to version 2026.2.3 or later to mitigate these security risks.

Canadian Centre for Cyber Securityupdated Sep 24, 10:46 UTC · 2d agofirst Sep 23, 14:45 UTC · 3d agoAdvisory 5 sources CVE-2026-28325 CVE-2026-28324

Critical SolarWinds Flaws Let Attackers Remotely Execute Code on Observability Servers

SolarWinds patches critical CVEs allowing unauthenticated RCE on Observability Self-Hosted servers in non-default configs.

SolarWinds has released Observability Self-Hosted 2026.2.3 to patch two critical vulnerabilities that allow unauthenticated attackers to remotely execute code. CVE-2026-28324, rated 9.8, is due to insufficient integrity checks in non-default, non-secure configurations, while CVE-2026-28325 (8.8) is caused by unsafe deserialization in specific communication modes. The vulnerabilities affect deployments using Web Performance Monitor (WPM) players, and SolarWinds has ended support for older versions like 2024.2.

Cyber Security Newsupdated Sep 24, 10:46 UTC · 2d agofirst Sep 23, 08:15 UTC · 4d agoVulnerability 5 sources CVE-2026-28324 CVE-2026-283251

SolarWinds Observability Self-Hosted

Timeline2 articles

Related CVEsby mentions

Appears with

SolarWinds security advisory (AV26-950)

Critical SolarWinds Flaws Let Attackers Remotely Execute Code on Observability Servers