poslední zpráva · zachyceno
SPOJENO PŘES CVE EPSS 0.02 (nejvyšší)
SolarWinds Observability Self-Hosted - Multiple Severe Vulnerabilities
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-28324, CVE-2026-28325, Summary: SolarWinds Observability Self-Hosted contains two vulnerabilities that could allow unauthenticated remote code execution. CVE-2026-28324 results from insufficient integrity checks and affects installations using a non-default, insecure configuration. CVE-2026-28325 results from deserialization of untrusted data when the product uses a specific…
SolarWinds FI CA IT FR
CVE v události 2
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-28324 | 9.8 3.1 · SolarWinds | – | 0.01 |
| CVE-2026-28325 | 8.8 3.1 · SolarWinds | – | 0.02 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.8.
Jak se o tom psalo 4
-
· zachyceno · NCSC-FI FI nadpis události
SolarWinds Observability Self-Hosted - Multiple Severe Vulnerabilities
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-28324, CVE-2026-28325, Summary: SolarWinds Observability Self-Hosted contains two vulnerabilities that could allow unauthenticated remote code execution. CVE-2026-28324 results from insufficient integrity checks and affects installations using a non-default, insecure configuration. CVE-2026-28325 results from deserialization of untrusted data when the product uses a specific…
-
· Cyber Centre Kanada CA
SolarWinds security advisory (AV26-950)
Serial number: AV26-950Date: September 23, 2026 As of September 22, 2026, SolarWinds is affected by vulnerabilities in the following product: SolarWinds Observability Self-Hosted Prior to 2026.2.3 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability (CVE-2026-28325) SolarWinds Observability Self-Hosted Remote Code…
-
· CSIRT Itálie (ACN) IT
Vulnerabilità in prodotti SolarWinds
Aggiornamenti di sicurezza SolarWinds sanano 2 vulnerabilità, di cui 1 con gravità "critica" e 1 con gravità "alta", presenti in Observability Self-Hosted, piattaforma per il monitoraggio e l'osservabilità delle infrastrutture e delle applicazioni. Tali vulnerabilità, qualora sfruttate da un utente remoto malintenzionato non autenticato, in determinate configurazioni del prodotto, potrebbero consentire l'esecuzione di codice arbitrario sui sistemi interessati con conseguente compromissione della
-
· zachyceno · CERT-FR – avis FR
Multiples vulnérabilités dans SolarWinds Observability Self-Hosted (23 septembre 2026)
De multiples vulnérabilités ont été découvertes dans SolarWinds Observability Self-Hosted. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.