Vulnerabilities

SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and…

SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

SolarWinds

Product

Orion / Web Help Desk / Serv-U / ARM

CVSS

8.8

Exposure class

Network management

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-28328 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 21
   CCCS advisory CCCS 13d ago

   SolarWinds security advisory (AV26-1068)

   CVE-2026-28328 SolarWinds
2. 8
   CVE NVD 14d ago

   SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated…

   CVSS 4.6 CVE-2026-28330 Oracle
3. 8
   CVE NVD 14d ago

   SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated…

   CVSS 6.4 CVE-2026-28329 SolarWinds