CVE-2026-28325

CVSS

—

EPSS

—

CISA KEV

Not listed

Exploitation

No report

Public exploits

None seen

State

Unknown

Coverage

• SecurityWeek9 hours ago

  SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted

  The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication. The post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.

  ↗securityweek.com/solarwinds-patches-critical-rc…(opens the publisher's site in a new tab)

What we observed