Summary
Ein Angreifer kann mehrere Schwachstellen in SolarWinds Platform ausnutzen, um beliebigen Programmcode auszuführen.
Product
SolarWinds Platform (ehemals "Orion") ist eine IT Performance-Monitoring Plattform.
Vulnerabilities 2
-
Critical 9.8
SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.
-
High 8.8
SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability stemming from deserialization of untrusted data when the application is configured to use a specific communication mode.
Revision history
-
#1
Initiale Fassung
References
-
SolarWinds Platform 2026.2.3 release notes vom 2026-09-22
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2026-2-3_release_notes.htm
-
Solarwinds Security Advisory vom 2026-09-22
https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28324
-
Solarwinds Security Advisory vom 2026-09-22
https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28325