CVE-2026-28298

HIGH 8.1CVE-2026-28298 · Published 26/03/2026 · updated 17/06/2026

Package	Affected versions	Patched versions
observability self-hosted solarwinds	`< 2026.1.1`	`2026.1.1`

Description

SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.

References

documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-1-1_release_notes.htm · Release Notes
solarwinds.com/trust-center/security-advisories/CVE-2026-28298 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free