CVE-2026-28324Vulnerability

Reported by 4 independent sources · first reported 23 Sep 2026 by CERT-FR · last reported 22 Oct 2026

Last reported 3 days ago

What the reports say

6 reports, newest first · the exact sentence from each

“Référence CVE CVE-2026-28324”

CERT-FRGovernment22 Oct 2026
Multiples vulnérabilités dans les produits SolarWinds (22 octobre 2026)
“…349, CVE-2026-95284, CVE-2026-95322, CVE-2026-95329, CVE-2026-95356, CVE-2026-95310 (Google Chrome), CVE-2024-0244 (Canon MF753Cdw), CVE-2026-28324, CVE-2026-28325 (SolarWinds Observability Self-Hosted), CVE-2026-97359, CVE-2026-97360 (HFS2), CVE-2026-96560 (LightLLM), CVE-2026-8…”

The Hacker NewsNews28 Sep 2026
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
“CVE-2026-28324”

CERT-FRGovernment28 Sep 2026
Bulletin d'actualité CERTFR-2026-ACT-041 (28 septembre 2026)
“SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability (CVE-2026-28324)”

Canadian Centre for Cyber SecurityGovernment23 Sep 2026
SolarWinds security advisory (AV26-950)
“CVE-2026-28324: vulnerabilidad de ejecución remota de código debido a una comprobación insuficiente de la integridad de los datos.”

INCIBE-CERTGovernment23 Sep 2026
Múltiples vulnerabilidades en Observability Self-Hosted de SolarWinds
“Bulletin de sécurité SolarWinds cve-2026-28324 du 22 septembre 2026”

CERT-FRGovernment23 Sep 2026
Multiples vulnérabilités dans SolarWinds Observability Self-Hosted (23 septembre 2026)

Indicators reported together

named in the same reports

www.solarwinds[.]comin 3 reports
hxxps://www.solarwinds[.]com/trust-center/security-advisories/cve-2026-28324in 2 reports
hxxps://www.solarwinds[.]com/trust-center/security-advisories/cve-2026-28325in 2 reports
hxxps://roundcube[.]net/news/2026/05/24/security-updates-1.6.16-and-1.7.1in 1 report
roundcube[.]netin 1 report
hxxps://www.synology[.]com/en-global/security/advisory/Synology_SA_26_13in 1 report
hxxps://www.solarwinds[.]com/trust-center/security-advisories/cve-2026-28326in 1 report
hxxps://tomcat.apache[.]org/security-10.html#Fixed_in_Apache_Tomcat_10.1.60in 1 report

Copy these 8 indicators · defanged

8 indicators, defanged, one per line

www.solarwinds[.]com
hxxps://www.solarwinds[.]com/trust-center/security-advisories/cve-2026-28324
hxxps://www.solarwinds[.]com/trust-center/security-advisories/cve-2026-28325
hxxps://roundcube[.]net/news/2026/05/24/security-updates-1.6.16-and-1.7.1
roundcube[.]net
hxxps://www.synology[.]com/en-global/security/advisory/Synology_SA_26_13
hxxps://www.solarwinds[.]com/trust-center/security-advisories/cve-2026-28326
hxxps://tomcat.apache[.]org/security-10.html#Fixed_in_Apache_Tomcat_10.1.60

Also named with it: CVE-2026-28325, CVE-2026-87902, CVE-2026-93616, CVE-2026-94127, CVE-2026-93952, CVE-2026-88771, CVE-2026-28308, CVE-2026-48842, CVE-2026-63077, CVE-2026-91843, CVE-2026-13639, CVE-2026-13684

Thanks — we review every report.

Report a wrong value