SolarWinds Observability Self-Hosted XSS Vulnerability 

(CVE-2025-26391)

Download PDF

Summary

SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authentication from a low-level account.

Affected Products

SolarWinds Observability Self-Hosted 2025.4 and prior versions

Fixed Software Release

SolarWinds Observability Self-Hosted 2025.4 SR1

Acknowledgments

the KPN REDteam

Advisory Details

Severity

5.4 Medium

Advisory ID

First Published

11/18/2025

Last Published

11/18/2025

Fixed Version

CVSS Score