SolarWinds has released fixes for two critical vulnerabilities in its self-hosted Observability product, tracked as CVE-2026-28324 and CVE-2026-28325. SecurityWeek reports that the flaws can be exploited without authentication, making exposed or reachable deployments a priority for administrators to assess.
Unauthenticated remote-code-execution risk is especially serious in monitoring platforms because they can hold infrastructure credentials, telemetry, and administrative integrations. Teams should identify all affected self-hosted instances, apply the vendor updates on an expedited basis, and validate that management interfaces are not unnecessarily exposed to the internet.
After patching, defenders should review authentication and application logs for suspicious requests, inspect privileged integrations and stored secrets according to their incident-response procedures, and confirm backups are available. Organizations should also use network segmentation and administrative access controls to reduce the blast radius of future application vulnerabilities.
Source: SecurityWeek.