Is CVE-2026-28329 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-28329?

CVE-2026-28329 has a CVSS v3 severity of MEDIUM (6.4).

Back

CVE-2026-28329

Description

SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations.