SolarWinds Observability Self-Hosted < 2026.4 Multiple Vulnerabilities

The version of SolarWinds Observability Self-Hosted installed on the remote host is prior to 2026.4. It is, therefore, affected by multiple vulnerabilities: - A broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions...

CVE-2026-28329

SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery SSRF vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations...

CVE-2026-28330

SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting XSS vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages...

CVE-2026-28328

SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions...

CVE-2026-28330 SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability

SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting XSS vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages...

CVE-2026-28330

The SolarWinds Observability Self-Hosted platform is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). This flaw allows authenticated attackers to inject malicious content or JavaScript into the system. The injected script is then displayed or executed in the browsers of oth...

EUVD-2026-105179

SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting XSS vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages...

CVE-2026-28330 SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability

SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting XSS vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages...

CVE-2026-28329 SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF)

SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery SSRF vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations...

CVE-2026-28329 SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF)

SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery SSRF vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations...

EUVD-2026-105178

SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery SSRF vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations...

CVE-2026-28329

SolarWinds Observability Self-Hosted is affected by a Server-Side Request Forgery (SSRF) vulnerability. This flaw allows authenticated attackers to force the application server to transmit requests to attacker-controlled or internal destinations . The vulnerability is associated with CWE-918 and ...

CVE-2026-28328 SolarWinds Observability Self-Hosted broken authorization schema

SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions...

CVE-2026-28328 SolarWinds Observability Self-Hosted broken authorization schema

SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions...

CVE-2026-28328

SolarWinds Observability Self-Hosted is impacted by a broken authorization schema (CWE-863). This vulnerability allows low-privileged users to access and modify information that falls outside of their assigned permissions. The issue results in a HIGH base severity (CVSS 3.1 score of 8.8), with si...

EUVD-2026-105175

SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions...

PT-2026-118504

Name of the Vulnerable Software and Affected Versions SolarWinds Observability Self-Hosted affected versions not specified Description A broken authorization schema allows low-privileged users to access and modify information that exceeds their assigned permissions. Recommendations At the moment,...

PT-2026-118506

SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting XSS vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages...

PT-2026-118505

SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery SSRF vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations...

SolarWinds Observability Self-Hosted Authorization Issue Vulnerability

SolarWinds Observability Self-Hosted versions 2026.2.3 and earlier have an authorization issue vulnerability. This vulnerability stems from defects in the authorization mechanism, which may allow low-privilege users to access and modify information beyond their permission scope...