Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.4
CVE-2025-26391: SolarWinds Observability Allows Malicious Code Execution
CVE-2025-26391 · published 11 months ago
Summary
A security weakness in SolarWinds Observability Self-Hosted allows attackers to inject malicious code into user-created URLs, which can lead to unauthorized actions. This requires a low-level account to access. Users should apply the latest patches and updates to mitigate this risk.
What to do
- Update solarwinds observability_self-hosted to version 2025.4.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| solarwinds | observability_self-hosted |
< 2025.4.1 cpe:2.3:a:solarwinds:observability_self-hosted:*:*:*:*:*:*:*:* |
Original advisory text
SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authenticati...
SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authentication from a low-level account.
References
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/rel... Release Notes Vendor Advisory
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26391 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published18 Nov 2025
Updated31 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-26391 · NVD
Track software like this
Free during beta