High severity8.8NVD Advisory· Published Oct 20, 2026· Updated Oct 20, 2026

CVE-2026-28328

Description

SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SolarWinds/Observability Self Hostedllm-fuzzy

Patches

Vulnerability mechanics

References

documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htmnvd
documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-4_release_notes.htmnvd
www.solarwinds.com/trust-center/security-advisories/CVE-2026-28328nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000