PT-2026-47827 · Solarwinds · Observability Self-Hosted

Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-28301

NVD

CVSS v3.1

4.8

Medium

Base vector

AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended website.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2026-28301

Affected Products

Observability Self-Hosted

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-28301 · Security Note
• https://solarwinds.com/trust-center/security-advisories/CVE-2026-28301 · Vendor Advisory
• https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm · Note
• https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-2_release_notes.htm · Note