Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-26391 EUVD-2025-197927GHSA-rmmr-w34p-g372

SolarWinds Observability Self-Hosted XSS Vulnerability

Published Nov 18, 2025 · Updated Nov 18, 2025 · Assigned by SolarWinds

Description

SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authentication from a low-level account.

Affected products

VendorProductAffectedFixed
SolarWinds SolarWinds Observability Self-Hosted SolarWinds Observability Self-Hosted 2025.4 and prior versions —

Advisories 1

References