PT-2026-118506

CVE-2026-28330

Published

2026-10-20

Updated

2026-10-20

Description by

CVSS 3.1

4.6

Medium

MetricsAV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages.

Exploitability

Fix

Impacts

Researchers

Dimitrios Titos

Frank Lycops

Georgios Sotiriadis

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers