CVE-2026-28298: SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability
SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28298?
CVE-2026-28298 has been classified as a moderate to high severity vulnerability due to the potential for stored cross-site scripting attacks.
How do I fix CVE-2026-28298?
To remediate CVE-2026-28298, it is recommended to update to the latest version of SolarWinds Observability Self-Hosted, which includes patches for this vulnerability.
What types of attacks can CVE-2026-28298 lead to?
CVE-2026-28298 can lead to unintended script execution, enabling attackers to steal sensitive information or perform actions on behalf of users.
Is CVE-2026-28298 easy to exploit?
Yes, CVE-2026-28298 is considered relatively easy to exploit, particularly if the application does not properly sanitize user inputs.
Which versions of SolarWinds Observability Self-Hosted are affected by CVE-2026-28298?
CVE-2026-28298 affects certain versions of SolarWinds Observability Self-Hosted that do not implement proper input validation.