Do Son 
TL;DR
On September 22, 2026, SolarWinds released software updates to resolve critical security flaws. These SolarWinds Observability vulnerabilities allow unauthenticated attackers to execute arbitrary code remotely under specific conditions. Therefore, administrators must upgrade their deployments immediately to protect corporate monitoring systems.
Track every CVE that hits your stack the moment it's exploited.
Get free email alertsWhy It Matters
Industry estimates suggest that thousands of enterprise environments rely on SolarWinds monitoring platforms daily. Consequently, remote execution flaws in these systems create significant risks for corporate networks. The primary flaw earned a critical CVSS score of 9.8. Meanwhile, the secondary vulnerability received a high CVSS rating of 8.8. An unauthenticated attacker can abuse these weaknesses to access underlying host servers. Fortunately, researchers responsibly disclosed these flaws. Neither active exploitation in the wild nor public proof-of-concept exploit code has been confirmed. However, delayed patching leaves critical infrastructure open to intrusion.
How The Attack Works
The flaws stem from validation failures and unsafe object handling. Specifically, CVE-2026-28324 involves insufficient integrity checks within non-default configurations. An unauthenticated attacker sends malformed requests across the network. Because the platform fails to verify data integrity, the system executes arbitrary code. In contrast, CVE-2026-28325 involves insecure deserialization of untrusted data. When administrators enable specific communication modes, the software processes serialized objects without proper sanitation. Attackers can provide crafted payloads to force the server to execute malicious code.
Affected Versions
These vulnerabilities impact SolarWinds Observability Self-Hosted installations prior to version 2026.2.3. Deployments with non-secure communication settings or custom Web Performance Monitoring configurations face the greatest danger.
Patch Or Mitigation Steps
Administrators must upgrade their systems to version 2026.2.3 without delay. The official SolarWinds release notes detail the necessary upgrade procedures. This release also switches passive WPM players to secure active communication modes. Furthermore, administrators should review their network configurations to isolate monitoring servers. Promptly remediating these SolarWinds Observability vulnerabilities prevents unauthorized system takeover.
Support Our Threat Intelligence
Find our vulnerability reports and weekly recaps helpful? Support our work today and unlock a 100% ad-free reading experience!
Buy Me a Coffee
