A vulnerability marked as problematic has been reported in SolarWinds Observability Self-Hosted 2025.2/2025.2.1. This impacts an unknown function. Performing a manipulation results in cross site scripting.
This vulnerability is reported as CVE-2026-28298. The attacker must have access to the local network to execute the attack. No exploit exists.
It is suggested to upgrade the affected component.
