CVE-2026-28325

Name of the Vulnerable Software and Affected Versions SolarWinds Observability Self-Hosted (affected versions not specified)

Description An unauthenticated remote code execution issue exists due to the deserialization of untrusted data. This occurs when the application is configured to use a specific communication mode. Deserialization is the process of converting a data stream back into an object, which can be exploited if the input is not properly validated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.