{"vulnerability": "cve-2026-28324", "sightings": [{"uuid": "76a62dc3-9ff2-4b0d-88c2-0ebd94e13c1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw543hhtp62t", "content": "CVE-2026-28324 - observability self-hosted\nIf SolarWinds Observability Self-Hosted is set up with custom, insecure settings, someone on the network can make the server run any program they choose without logging\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#solarwinds #CVE #infosec", "creation_timestamp": "2026-09-22T20:50:05.054661Z"}, {"uuid": "4550881e-193e-4471-83b1-0e29923013fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-28324", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117316837977938958", "content": "https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28324\n\nSolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.\n`sev:CRIT 9.8 - AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "creation_timestamp": "2026-09-22T21:34:45.024299Z"}, {"uuid": "34c34c3d-f57e-422f-b2d0-568ec99d375c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw5akqbdy622", "content": "\ud83d\udea8 CVE-2026-28324 \u2014 CVSS 9.8 CRITICAL\n\nSolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution v...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-28324\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T22:10:12.625543Z"}, {"uuid": "87d0f98b-6121-4a3e-ab8f-43789ed21b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mw5k6x5qoa2n", "content": "SolarWinds Observability vulnerabilities allow RCE via CVE-2026-28324. Update to version 2026.2.3 to secure your monitoring infrastructure today.\n\n#SolarWinds #Cybersecurity #CVE202628324 #CVE202628325 #RCE #Infosec", "creation_timestamp": "2026-09-23T01:02:35.278434Z"}, {"uuid": "126bea49-6386-4818-82d6-c8bc731f27ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6t4ti2wv2r", "content": "\ud83d\udd17 CVE : CVE-2026-28324, CVE-2026-28325", "creation_timestamp": "2026-09-23T13:15:07.085060Z"}, {"uuid": "93a57f92-6916-464c-9a4e-9a472ee173a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw74m6gtgh23", "content": "~Cybergcca~\nWordPress CVE-2026-87902 is exploited in the wild; SolarWinds and HPE also require updates.\n-\nIOCs: CVE-2026-87902, CVE-2026-28325, CVE-2026-28324\n-\n#CVE202687902 #ThreatIntel #WordPress", "creation_timestamp": "2026-09-23T16:04:46.264926Z"}, {"uuid": "4e8f43fb-ff49-461a-a450-b6737881767b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-950", "content": "", "creation_timestamp": "2026-09-23T16:15:28.540911Z"}, {"uuid": "d248a1ab-c3fe-46aa-91cc-e038f0aa61bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwbcrgsix62r", "content": "SolarWinds patched two critical RCE flaws in Observability Self-Hosted, including CVE-2026-28324 and CVE-2026-28325. No exploitation in the wild has been reported. #SolarWinds #RCE #CVE202628324", "creation_timestamp": "2026-09-24T13:00:24.147337Z"}, {"uuid": "231a5a94-2cd4-4065-a4d5-6ae69cf21db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/", "content": "The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\n\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.", "creation_timestamp": "2026-09-24T08:40:40.000000Z"}, {"uuid": "d87b5d7b-f806-465d-9d15-6818859920d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://t.me/information_security_channel/55973", "content": "SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted\nhttps://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/\n\nThe vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted (https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-24T21:05:08.000000Z"}, {"uuid": "24609dfd-4fec-4f5f-a2f3-c11edd3c11d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://t.me/VulnerabilityNews/44588", "content": "SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted\n\nThe vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.\nhttps://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/", "creation_timestamp": "2026-09-24T23:00:53.000000Z"}, {"uuid": "937034dc-a41c-4453-81e7-251a1b3cbb8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-28324", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwckyplk4g2h", "content": "SolarWinds patches two unauth RCE flaws in Observability Self-Hosted: CVE-2026-28324 (CVSS 9.8) and CVE-2026-28325\u2026 https://0daynews.com/articles/2026-09-24-solarwinds-observability-cve-2026-28324-28325-rce/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3489", "creation_timestamp": "2026-09-25T01:00:21.178345Z"}]}