Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
2 IOCs

SolarWinds Observability Flaws Let Unauthenticated Attackers Execute Remote Code

Cyber Press
Cyber Press
Published September 23, 2026Original Report

Excerpt

SolarWinds released Observability Self-Hosted 2026.2.3 to address two critical remote code execution vulnerabilities that could let unauthenticated attackers compromise affected deployments. The flaws, tracked as CVE-2026-28324 and CVE-2026-28325, carry CVSS severity scores of 9.8 and 8.8, respectively, and security researcher Kai Huang of Armadin reported them. SolarWinds said both vulnerabilities affect deployments operating under specific non-default communication or…

Read the original report →

Indicators of Compromise

Open the mindmap →

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-28324MediumScore 54/100First seen
CVECVE-2026-28325MediumScore 54/100First seen

IOC Relationship Graph

Building graph…