SolarWinds
CVE-2026-28329: SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated attackers to cause
CVE-2026-28329 Oct 20, 2026 Source: Vendor
SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://nvd.nist.gov/vuln/detail/CVE-2026-28329
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
3 lines
Showing 1–3 of 3
CVE-2026-28329
BR2026-0000-029352
unclaimed
Credited as Dimitrios Titos from NATO
CVE-2026-28329
BR2026-0000-029353
unclaimed
Credited as Georgios Sotiriadis from NATO
CVE-2026-28329
BR2026-0000-029354
unclaimed
Credited as Frank Lycops from NATO