Critical RCE Vulnerabilities Patched in SolarWinds Observability

Addressing Critical RCE Risks Two significant vulnerabilities, identified as CVE-2026-28324 and CVE-2026-28325, have been disclosed within the SolarWinds Observability self-hosted platform. These flaws are particularly dangerous as they can be exploited without requiring prior authentication, meaning an external attacker could potentially execute arbitrary code on the affected server. Given the nature of these vulnerabilities, the risk of full system compromise is extremely high, requiring immediate attention from security administrators. ## Immediate Action Plan for IT Teams To maintain the integrity of your network, all organizations running self-hosted instances of the affected SolarWinds software must prioritize the application of the latest patches provided by the vendor. In addition to patching, we advise conducting a thorough audit of your environment to detect any indicators of compromise that may have occurred prior to the patch being applied. It is also recommended to restrict access to management interfaces, ensuring they are not exposed to the public internet, and utilizing a robust vulnerability management program to monitor for similar flaws in the future.

---

แหล่งที่มา: SecurityWeek เผยแพร่ครั้งแรก: Thu, 24 Sep 2026 10:40:40 +0000 บทความต้นฉบับ: อ่านต้นฉบับ