TECH NEWS

SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted

Vulnerabilities

The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.

SolarWinds has released patches for two severe vulnerabilities in Observability Self-Hosted that could be exploited for remote code execution (RCE).

Observability Self-Hosted is an on-premises and hybrid IT monitoring solution that provides organizations with unified monitoring across environments, configuration management, and control over operational data and security compliance.

The first flaw, tracked as CVE-2026-28324 (CVSS score of 9.8), is an insufficient integrity check issue leading to RCE on deployments that run non-default and non-secure configurations.

Tracked as CVE-2026-28325 (CVSS score of 8.8), the second bug is described as a deserialization of untrusted data weakness affecting installations configured to use a specific communication mode.

Both security defects, SolarWinds says, can be exploited by remote attackers without authentication.

The vulnerabilities impact all Observability Self-Hosted versions up to 2026.2.2 and were addressed in version 2026.2.3. SolarWinds credited Kai Huang from...

Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE

https://static01.nyt.com/images/2026/10/14/opinion/14eks-turkle-image01/14eks-turkle-image01-facebookJumbo.png

Q&A with MIT sociologist Sherry Turkle, who has been studying relationships between humans and machines since the 1970s, on her new book, AI chatbots, and more

Featured Podcasts Big Technology Podcast: AI Leaders Can't Get Along. So How Will They Keep Us Safe? — With Kevin Roose The Big Technology Podcast takes you behind the scenes in the tech world featuring interviews with plugged-in insiders and outside agitators. Subscribe to Big Technology Podcast. Channels with

https://assets.bwbx.io/images/users/iqjWHBFdfxIU/i1bntYrlOljM/v0/1200x800.jpg

A look at L-Acoustics, whose audio platform uses machine learning to help artists like Céline Dion isolate their voices and cut through noise at live concerts

https://www.securityweek.com/wp-content/uploads/2023/01/Cybersecurity_News-SecurityWeek.jpg

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Cisco on Wednesday warned customers that hackers have been exploiting a critical-severity vulnerability in Secure Email Gateway. Tracked as CVE-2026-76519 (CVSS score of 9.8), the security defect impacts the Advanced Malware Protection (AMP) feature of the appliance and could allow remote, unauthenticated attackers to write arbitrary files on the

https://techcrunch.com/wp-content/uploads/2026/10/Specs_agent.jpeg?resize=1200,675

Figma announces new features to define how AI agents work on its platform, including Figma Specs, a Markdown editor that lets users define their design language

Vulnerabilities

Read more

Q&A with MIT sociologist Sherry Turkle, who has been studying relationships between humans and machines since the 1970s, on her new book, AI chatbots, and more

A look at L-Acoustics, whose audio platform uses machine learning to help artists like Céline Dion isolate their voices and cut through noise at live concerts

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Figma announces new features to define how AI agents work on its platform, including Figma Specs, a Markdown editor that lets users define their design language