SolarWinds patches two remote code execution flaws in observability servers

Image: Primary

Published Wednesday, September 23, 2026 · 12:22 PM EDT

SolarWinds released Observability Self-Hosted 2026.2.3 on September 22 to fix two vulnerabilities that could let attackers run code remotely without logging in. The flaws, CVE-2026-28324 and CVE-2026-28325, affect installations using specific non-default configurations or communication modes. One flaw involves insufficient integrity checks; the other involves processing untrusted data in a way that could execute commands. The update also changes communication settings for some Web Performance Monitor players and assigns strong passwords to upgraded remote passive players. Players excluded from automatic upgrades need administrator attention. The report describes the potential for exploitation but does not identify an attack using either flaw.

Sources

cybersecuritynews.com

Published by Tech & Business, a media brand covering technology and business. This story was sourced from cybersecuritynews.com and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Security Infrastructure

Pwn.ai demonstrates Firecracker guest escape on a host running it as root

Pwn.ai says it escaped a Firecracker microVM and executed a chosen operation as root on the host while the virtual machine remained accessible over SSH.

Security Infrastructure

QNAP warns of suspected NAS compromises through Plex flaws

QNAP says it has received multiple reports of suspected compromises of customers' network storage devices through the Plex2Shell vulnerability chain. The company urges users to update Plex Media Server through its App Center to version 1.43.3.10861.

Security Infrastructure

Some WordPress sites remain exposed while installing security fix

Some WordPress sites remain vulnerable to server code execution while installing the fix for actively exploited CVE-2026-119977, researcher Umut Bayram warned.

Security

Chainalysis says breach exposed password hashes and live tokens for all users

Chainalysis said hackers obtained names, usernames, password hashes and live tokens for all its users following a breach of its network security.

Security

Gnosis Pay discloses customer data breach and adds payment checks

Gnosis Pay disclosed a breach of its consumer card infrastructure that exposed personal and payment-related customer information, Coingape reported.

Security

Veeam distributes fixes for critical Linux kernel vulnerability

Veeam said on Friday that some of its products are affected by CVE-2026-98432, a critical Linux kernel vulnerability, BleepingComputer reported. The flaw allows remote unauthenticated attackers to execute commands as root on servers running Multipath TCP listeners.