CVE-2026-28328

LOWCVSS 8.8 · HIGH

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-4_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28328

Weakness type (CWE)

CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

Threat Angel@MyThreatAngel1d
Security Alert: SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged u… Read More: https://nvd.nist.gov/vuln/detail/CVE-2026-28328 or visit: https://threat.threatangel.com #CyberSecurity #ThreatIntel #InfoSec
0001049
29 followersView on X

Explore more

Back to dashboard