The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.

The post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.

https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/