{"metadata": {"vulnerability": "CVE-2026-28324", "count": 37, "kinds": {"milestone": 7, "sighting": 17, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0388", "record": "NCSC-2026-0388", "field": "document.tracking.generator.date"}, {"timestamp": "2026-02-26T14:46:41.521Z", "date_only": false, "value": "2026-02-26T14:46:41.521Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-28324", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-22T00:00:00Z", "date_only": true, "value": "2026-09-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1215", "record": "CERTFR-2026-AVI-1215", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-22T19:11:33.997Z", "date_only": false, "value": "2026-09-22T19:11:33.997Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-28324", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-22T19:11:33.997Z", "date_only": false, "value": "2026-09-22T19:11:33.997Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / SolarWinds", "record": "CVE-2026-28324", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-22T19:35:31.960Z", "date_only": false, "value": "2026-09-22T19:35:31.960772Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-28324", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-22T19:35:31.960Z", "date_only": false, "value": "2026-09-22T19:35:31.960772Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28324", "record": "FKIE_CVE-2026-28324", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-22T19:35:38.810Z", "date_only": false, "value": "2026-09-22T19:35:38.810Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-28324", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-22T19:35:38.810Z", "date_only": false, "value": "2026-09-22T19:35:38.810Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-28324", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-22T20:17:03Z", "date_only": false, "value": "2026-09-22T20:17:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P7GW-VM7R-23MP", "record": "GHSA-P7GW-VM7R-23MP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-22T20:17:03.250Z", "date_only": false, "value": "2026-09-22T20:17:03.250", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28324", "record": "FKIE_CVE-2026-28324", "field": "published"}, {"timestamp": "2026-09-22T20:50:05.054Z", "date_only": false, "value": "2026-09-22T20:50:05.054661Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw543hhtp62t", "record": "CVE-2026-28324", "field": "creation_timestamp", "uuid": "76a62dc3-9ff2-4b0d-88c2-0ebd94e13c1b", "content": "CVE-2026-28324 - observability self-hosted\nIf SolarWinds Observability Self-Hosted is set up with custom, insecure settings, someone on the network can make the server run any program they choose without logging\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#solarwinds #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mw543hhtp62t"}, {"timestamp": "2026-09-22T21:31:28Z", "date_only": false, "value": "2026-09-22T21:31:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P7GW-VM7R-23MP", "record": "GHSA-P7GW-VM7R-23MP", "field": "published"}, {"timestamp": "2026-09-22T21:31:28Z", "date_only": false, "value": "2026-09-22T21:31:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P7GW-VM7R-23MP", "record": "GHSA-P7GW-VM7R-23MP", "field": "modified"}, {"timestamp": "2026-09-22T21:34:45.024Z", "date_only": false, "value": "2026-09-22T21:34:45.024299Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/117316837977938958", "record": "cve-2026-28324", "field": "creation_timestamp", "uuid": "4550881e-193e-4471-83b1-0e29923013fd", "content": "https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28324\n\nSolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.\n`sev:CRIT 9.8 - AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "url": "https://infosec.exchange/users/cR0w/statuses/117316837977938958"}, {"timestamp": "2026-09-22T22:10:12.625Z", "date_only": false, "value": "2026-09-22T22:10:12.625543Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw5akqbdy622", "record": "CVE-2026-28324", "field": "creation_timestamp", "uuid": "34c34c3d-f57e-422f-b2d0-568ec99d375c", "content": "\ud83d\udea8 CVE-2026-28324 \u2014 CVSS 9.8 CRITICAL\n\nSolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution v...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-28324\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mw5akqbdy622"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1215", "record": "CERTFR-2026-AVI-1215", "field": "last_revision_date"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1215", "record": "CERTFR-2026-AVI-1215", "field": "initial_release_date"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1215", "record": "CERTFR-2026-AVI-1215", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-23T01:02:35.278Z", "date_only": false, "value": "2026-09-23T01:02:35.278434Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mw5k6x5qoa2n", "record": "CVE-2026-28324", "field": "creation_timestamp", "uuid": "87d0f98b-6121-4a3e-ab8f-43789ed21b6f", "content": "SolarWinds Observability vulnerabilities allow RCE via CVE-2026-28324. Update to version 2026.2.3 to secure your monitoring infrastructure today.\n\n#SolarWinds #Cybersecurity #CVE202628324 #CVE202628325 #RCE #Infosec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mw5k6x5qoa2n"}, {"timestamp": "2026-09-23T09:09:24.130Z", "date_only": false, "value": "2026-09-23T09:09:24.130271Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0388", "record": "NCSC-2026-0388", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-23T09:09:24.130Z", "date_only": false, "value": "2026-09-23T09:09:24.130271Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0388", "record": "NCSC-2026-0388", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-23T09:09:24.130Z", "date_only": false, "value": "2026-09-23T09:09:24.130271Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0388", "record": "NCSC-2026-0388", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-23T13:15:07.085Z", "date_only": false, "value": "2026-09-23T13:15:07.085060Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6t4ti2wv2r", "record": "CVE-2026-28324", "field": "creation_timestamp", "uuid": "126bea49-6386-4818-82d6-c8bc731f27ee", "content": "\ud83d\udd17 CVE : CVE-2026-28324, CVE-2026-28325", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6t4ti2wv2r"}, {"timestamp": "2026-09-23T16:04:46.264Z", "date_only": false, "value": "2026-09-23T16:04:46.264926Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw74m6gtgh23", "record": "CVE-2026-28324", "field": "creation_timestamp", "uuid": "93a57f92-6916-464c-9a4e-9a472ee173a8", "content": "~Cybergcca~\nWordPress CVE-2026-87902 is exploited in the wild; SolarWinds and HPE also require updates.\n-\nIOCs: CVE-2026-87902, CVE-2026-28325, CVE-2026-28324\n-\n#CVE202687902 #ThreatIntel #WordPress", "url": "https://bsky.app/profile/cyfar.ca/post/3mw74m6gtgh23"}, {"timestamp": "2026-09-23T16:15:28.540Z", "date_only": false, "value": "2026-09-23T16:15:28.540911Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-950", "record": "CVE-2026-28324", "field": "creation_timestamp", "uuid": "4e8f43fb-ff49-461a-a450-b6737881767b", "url": "https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-950"}, {"timestamp": "2026-09-24T08:40:40Z", "date_only": false, "value": "2026-09-24T08:40:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/", "record": "CVE-2026-28324", "field": "creation_timestamp", "uuid": "231a5a94-2cd4-4065-a4d5-6ae69cf21db6", "content": "The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\n\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.", "url": "https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/"}, {"timestamp": "2026-09-24T13:00:24.147Z", "date_only": false, "value": "2026-09-24T13:00:24.147337Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwbcrgsix62r", "record": "CVE-2026-28324", "field": "creation_timestamp", "uuid": "d248a1ab-c3fe-46aa-91cc-e038f0aa61bd", "content": "SolarWinds patched two critical RCE flaws in Observability Self-Hosted, including CVE-2026-28324 and CVE-2026-28325. No exploitation in the wild has been reported. #SolarWinds #RCE #CVE202628324", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwbcrgsix62r"}, {"timestamp": "2026-09-24T21:00:46.893Z", "date_only": false, "value": "2026-09-24T21:00:46.893", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28324", "record": "FKIE_CVE-2026-28324", "field": "lastModified"}, {"timestamp": "2026-09-24T21:05:08Z", "date_only": false, "value": "2026-09-24T21:05:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/55973", "record": "CVE-2026-28324", "field": "creation_timestamp", "uuid": "d87b5d7b-f806-465d-9d15-6818859920d3", "content": "SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted\nhttps://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/\n\nThe vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted (https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/55973"}, {"timestamp": "2026-09-24T23:00:53Z", "date_only": false, "value": "2026-09-24T23:00:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/44588", "record": "CVE-2026-28324", "field": "creation_timestamp", "uuid": "24609dfd-4fec-4f5f-a2f3-c11edd3c11d0", "content": "SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted\n\nThe vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.\nhttps://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/", "url": "https://t.me/VulnerabilityNews/44588"}, {"timestamp": "2026-09-25T01:00:21.178Z", "date_only": false, "value": "2026-09-25T01:00:21.178345Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwckyplk4g2h", "record": "cve-2026-28324", "field": "creation_timestamp", "uuid": "937034dc-a41c-4453-81e7-251a1b3cbb8f", "content": "SolarWinds patches two unauth RCE flaws in Observability Self-Hosted: CVE-2026-28324 (CVSS 9.8) and CVE-2026-28325\u2026 https://0daynews.com/articles/2026-09-24-solarwinds-observability-cve-2026-28324-28325-rce/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3489", "url": "https://bsky.app/profile/0daynews.bsky.social/post/3mwckyplk4g2h"}, {"timestamp": "2026-09-25T14:00:32.522Z", "date_only": false, "value": "2026-09-25T14:00:32.522886Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mwdwlvqyha2z", "record": "CVE-2026-28324", "field": "creation_timestamp", "uuid": "fdf7ad7d-7700-439c-932d-3e640ca40958", "content": "SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted (CVE-2026-28324 CVSS 9.8, CVE-2026-28325 CVSS 8.8). Fixed in 2026.2.3. Source: SecurityWeek. #CyberSecurity", "url": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mwdwlvqyha2z"}, {"timestamp": "2026-09-25T18:00:33.158Z", "date_only": false, "value": "2026-09-25T18:00:33.158784Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mwedz2vgsk2n", "record": "CVE-2026-28324", "field": "creation_timestamp", "uuid": "50af8734-0da6-49bf-820d-056c14dae251", "content": "SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted (CVE-2026-28324 CVSS 9.8, CVE-2026-28325 CVSS 8.8). Fixed in 2026.2.3. Source: SecurityWeek. #CyberSecurity", "url": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mwedz2vgsk2n"}, {"timestamp": "2026-09-25T20:31:11.036Z", "date_only": false, "value": "2026-09-25T20:31:11.036672Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117333574069690955", "record": "cve-2026-28324", "field": "creation_timestamp", "uuid": "07be485c-c18a-476f-9e6c-11f328c6ea76", "content": "\ud83d\udcf0 SolarWinds Patches Critical Unauthenticated RCE Flaws in Observability Platform\nSolarWinds patches two unauthenticated RCE vulnerabilities in its Observability Self-Hosted platform. CVE-2026-28324 is rated critical (CVSS 9.8). Customers are urged to update to version 2026.2.3 immediately. #SolarWinds #CVE #RCE #PatchTuesday\n\ud83d\udd17 https://cyber.netsecops.io/articles/solarwinds-patches-critical-rce-flaws-in-observability-platform-cve-2026-28324/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/117333574069690955"}, {"timestamp": "2026-09-25T20:31:36.268Z", "date_only": false, "value": "2026-09-25T20:31:36.268648Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mwemh5xqvt2r", "record": "CVE-2026-28324", "field": "creation_timestamp", "uuid": "0eb436b4-f96c-4f74-8339-4cc261fae6a5", "content": "SolarWinds patches two unauthenticated RCE vulnerabilities in its Observability Self-Hosted platform. CVE-2026-28324 is rated critical (CVSS 9.8). Customers are urged to update to version 2026.2.3 immediately. #SolarWinds #CVE #RCE #PatchTuesday\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mwemh5xqvt2r"}, {"timestamp": "2026-09-25T21:00:33.155Z", "date_only": false, "value": "2026-09-25T21:00:33.155624Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mweo2wpcpn2f", "record": "CVE-2026-28324", "field": "creation_timestamp", "uuid": "796c830e-cbf4-4b53-b10d-bcbd3c2b94a6", "content": "SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted (CVE-2026-28324 CVSS 9.8, CVE-2026-28325 CVSS 8.8). Fixed in 2026.2.3. Source: SecurityWeek. #CyberSecurity", "url": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mweo2wpcpn2f"}]}