Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-26392 EUVD-2025-35157GHSA-9m5c-jx79-qw78

SolarWinds Observability Self-Hosted SQL Injection Vulnerability

Published Oct 21, 2025 · Updated Oct 21, 2025 · Assigned by SolarWinds

Description

SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account. This vulnerability requires authentication from a low-privilege account.

Affected products

VendorProductAffectedFixed
SolarWinds Observability Self-Hosted 2025.2.1 and below —

Advisories 1

References