Is CVE-2026-28330 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-28330?

CVE-2026-28330 has a CVSS v3 severity of MEDIUM (4.6).

Back

CVE-2026-28330

Description

SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages.