Is CVE-2026-28324 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-28324?

CVE-2026-28324 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-28324

Description

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.