CVE-2025-26391

SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authentication from a low-level account.

• CWE-79

• https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2025-4-1_release_notes.htmRelease Notes, Vendor Advisory
• https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26391Vendor Advisory

Published

Nov 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-26383The iSTAR Configuration Utility (ICU) tool leaks memory, whi…6.3
• CVE-2025-26385Johnson Controls Metasys component listed below have Improp…9.5
• CVE-2025-26386Johnson Controls iSTAR Configuration Utility (ICU) has Stack…7.1
• CVE-2025-26389A vulnerability has been identified in OZW672 (All versions …9.8
• CVE-2025-2639A vulnerability has been found in JIZHICMS up to 1.7.0 and c…5.3
• CVE-2025-26390A vulnerability has been identified in OZW672 (All versions …9.8
• CVE-2025-26392SolarWinds Observability Self-Hosted is susceptible to SQL i…4.6
• CVE-2025-26393SolarWinds Service Desk is affected by a broken access contr…5.4
• CVE-2025-26394SolarWinds Observability Self-Hosted is susceptible to an …4.8
• CVE-2025-26395SolarWinds Observability Self-Hosted was susceptible to a …4.3
• CVE-2025-26396The SolarWinds Dameware Mini Remote Control was determined t…7.8
• CVE-2025-26397SolarWinds Observability Self-Hosted is susceptible to Deser…7.8