CVE-2025-26395 — SolarWinds SWOSH DOM-based reflective XSS Vulnerability
SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL. The attack requires authentication u…
Published: 2025-06-10 · CVSS: 7.1 · CVSS 3.1
SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL. The attack requires authentication using an administrator-level account and user interaction is required.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7