CVE-2026-28324

criticalpriority · track · 39OT risk · elevatedEPSS 0.007 · 51 %ileDEFRNL

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.65% (51st) EPSS

CVSS 9.8 · critical

Is it mine?

3 products

Check your exposure

Who says so?

3 sources

cert_bund · ncsc_nl · certfr

EPSS · scored 2026-10-27

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · psirt@solarwinds.comexploitability 3.9 · impact 5.9

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-345USprimary

affected products (3)

Products and version ranges known to be affected.

SolarWinds Platform <2026.2.3all versionscert_bundDE
SolarWinds Platform< 2026.2.3cert_bundDE
SolarWinds Observability Self-Hosted≤ vers:unknown/*ncsc_nlNL

advisories (3)

Vendor and ecosystem advisories describing this.

NCSC-2026-0388Kwetsbaarheden verholpen in SolarWinds Observability Self-HostedNL2026-09-23csaf · ncsc_nlNL
SolarWinds heeft kwetsbaarheden verholpen in SolarWinds Observability Self-Hosted.
WID-SEC-W-2026-3515SolarWinds Platform (Observability Self-Hosted): Mehrere Schwachstellen ermöglichen CodeausführungDeutsch2026-09-22csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in SolarWinds Platform ausnutzen, um beliebigen Programmcode auszuführen.
CERTFR-2026-AVI-1364Multiples vulnérabilités dans les produits SolarWindsFrançais2026-10-22vendor · certfrFR

sources

Which sources assert this record, and when.

cert_bund ncsc_nl certfr NVD CVE.org MITRE

published 2026-09-22modified 2026-09-24

related (1,449)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2023-38831US	high7.8OT critical	99.8% (100th)	KEV	2023-08-23
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may inc…
CVE-2022-40139US	high7.2OT critical	3.44% (89th)	KEV	2022-09-19
Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Apex One server administra…
CVE-2022-26871US	critical9.8OT critical	19.5% (97th)	KEV	2022-03-29
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execut…
CVE-2019-5591US	medium6.5OT critical	18.6% (97th)	KEV	2020-08-14
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	2023-12-18
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packet…

+1444 more

references (4) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan