CVE-2026-28328Vulnerability
Reported by 3 independent sources · first reported by Canadian Centre for Cyber Security · last reported
Last reported 2 days ago
EPSS0.5%
higher than 39% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 39% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
3 reports, newest first · the exact sentence from each-
Splunk, SolarWinds Release Fresh Security Updates“Tracked as CVE-2026-28328, the flaw is described as a broken authorization schema issue.”
-
Multiples vulnérabilités dans les produits SolarWinds (22 octobre 2026)“Bulletin de sécurité SolarWinds cve-2026-28328 du 20 octobre 2026”
-
SolarWinds security advisory (AV26-1068)“SolarWinds Observability Self-Hosted broken authorization schema (CVE-2026-28328)”
Indicators reported together
named in the same reports- www.solarwinds[.]comin 1 report
- hxxps://www.solarwinds[.]com/trust-center/security-advisories/cve-2026-28328in 1 report
- hxxps://www.solarwinds[.]com/trust-center/security-advisories/cve-2026-28329in 1 report
- hxxps://www.solarwinds[.]com/trust-center/security-advisories/cve-2026-28330in 1 report
- hxxps://www.solarwinds[.]com/trust-center/security-advisories/cve-2026-28331in 1 report
Copy these 5 indicators · defanged
Also named with it: CVE-2026-28324, CVE-2026-28308, CVE-2026-76299, CVE-2026-76302, CVE-2026-76407, CVE-2026-76531, CVE-2026-28329, CVE-2026-28330, CVE-2026-28331
Thanks — we review every report.