FrançaisShown in its original language — a full translation is planned for a future version.
Multiples vulnérabilités dans les produits SolarWinds
view advisory published 2026-10-22
A published security advisory; the vulnerabilities below are the ones it describes.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-28331US | medium4.4 | — | ||
SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges. | ||||
| CVE-2026-28330US | medium4.6 | — | ||
SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content o… | ||||
| CVE-2026-28329US | medium6.4 | — | ||
SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated attackers to cause the application ser… | ||||
| CVE-2026-28328US | high8.8OT elevated | — | ||
SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their ass… | ||||
| CVE-2026-28324US | critical9.8OT elevated | — | ||
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations conf… | ||||
| CVE-2026-28308US | — | — | ||
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The impac… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan