CPE
high
advisory
SolarWinds Observability Self-Hosted: Broken Authorization Schema (CVE-2026-28328)
1 TTP 1 CVESolarWinds Observability Self-Hosted contains a broken authorization schema vulnerability that permits low-privileged users to access or modify restricted information, leading to unauthorized privilege escalation within the application.
Observability Self-Hosted
privilege-escalation
vulnerability
web-application
1t
1c
high
advisory
Unauthenticated Remote Code Execution in SolarWinds Observability Self-Hosted
2 TTPs 1 CVESolarWinds Observability Self-Hosted is vulnerable to unauthenticated remote code execution via insecure deserialization, allowing remote attackers to execute arbitrary code.
SolarWinds Observability Self-Hosted
vulnerability
rce
solarwinds
2t
1c
critical
advisory
Unauthenticated Remote Code Execution in SolarWinds Observability Self-Hosted
1 CVEAn unauthenticated remote code execution vulnerability (CVE-2026-28324) exists in SolarWinds Observability Self-Hosted due to insufficient integrity checks in non-default, non-secure configurations.
Observability Self-Hosted
remote-code-execution
vulnerability
cve-2026-28324
1c