A vulnerability labeled as problematic has been found in SolarWinds Observability Self-Hosted 2025.2/2025.2.1. This affects an unknown function. Such manipulation leads to cross site scripting.
This vulnerability is documented as CVE-2026-28297. The attack requires being on the local network. There is not any exploit available.
The affected component should be upgraded.
