CVE-2025-26395

creationtimestamp| type| source ---|---|--- 2025-06-10 16:00:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114659899868645807 2025-06-10 16:01:27+00:00| published-proof-of-concept| Telegram/Cx1-p36APBve2ZXOx6JZQ1ihep0qwdXJnQmLSJI9jXODK8...

CVE-2025-26395

SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting XSS vulnerability due to an unsanitized field in the URL. The attack requires authentication using an administrator-level account and user interaction is required...

CVE-2025-26395

CVE-2025-26395 concerns SolarWinds Observability Self-Hosted, where an XSS vulnerability arises from an unsanitized URL field. The attack requires an administrator-level account and user interaction. Affected component details (version ranges, specific modules) and exact root cause are not explic...