cvedb.io
CVE-2025-26397
HIGH · CVSS 7.8
EPSS exploitation probability: 0%
Published 2025-07-24T08:15:30.113 · Last modified 2026-06-17T09:01:42.180

Summary

SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vulnerability requires authentication from a low-level account and local access to the host server.

Affected products

solarwinds — observability_self-hosted

Does this affect you?

Add your gear to cvedb and we'll alert you only when solarwinds ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.