Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2533▼ 405 respecto a la semana anterior
Críticas / altas1319▲ 38 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)99▼ 428 respecto a la semana anterior
–

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
Pendiente de análisisAlta (8.8)1.5%—Solarwinds Observability Self-hostedAI22/9/202624/9/2026
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability stemming from deserialization of untrusted data when the application is configured to use a specific communication mode.
Pendiente de análisisCrítica (9.8)0.65%—Solarwinds Observability Self-hostedAI22/9/202624/9/2026
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.
AnalizadaAlta (8.1)0.42%—Solarwinds Observability Self-hosted26/3/202617/6/2026
SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.
AnalizadaAlta (8.7)0.45%—Solarwinds Observability Self-hosted26/3/202617/6/2026
SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.
AnalizadaMedia (4.4)0.23%—Solarwinds Observability Self-hosted18/11/202517/6/2026
SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.
AnalizadaMedia (5.4)0.28%—Solarwinds Observability Self-hosted18/11/202517/6/2026
SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authentication from a low-level account.
AnalizadaMedia (4.6)0.24%—Solarwinds Observability Self-hosted21/10/202517/6/2026
SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account. This vulnerability requires authentication from a low-privilege account.
AnalizadaAlta (7.8)0.29%—Solarwinds Observability Self-hosted24/7/202517/6/2026
SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vulnerability requires authentication from a low-level account…
AnalizadaMedia (4.3)0.21%—Solarwinds Observability Self-hosted10/6/202517/6/2026
SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL. The attack requires authentication using an administrator-level account and user interaction is required.
AnalizadaMedia (4.8)0.19%—Solarwinds Observability Self-hosted10/6/202517/6/2026
SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.