CyberSecurity News
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
AI summary
SolarWinds has released patches for two critical remote code execution vulnerabilities in its Observability Self-Hosted product. These vulnerabilities can be exploited without the need for authentication. The flaws are tracked as CVE-2026-28324 and CVE-2026-28325.
Vulnerabilities mentioned
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability stemming from deserialization of untrusted data when the application is configured to use a specific communication mode.
This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.