CVE-2025-26394
SolarWinds SWOSH Open Redirection Vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
SolarWinds SWOSH Open Redirection Vulnerability
SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.
Reserved 2025-02-08 | Published 2025-06-10 | Updated 2025-06-10 | Assigner SolarWindsCWE-601 URL Redirection to Untrusted Site ('Open Redirect')
SolarWinds would like to thank Shahzin Sajid, Al Sabah Salim, and Shabeer Ali from the QatarEnergyLNG SOC team for reporting on the issue in a responsible manner.
www.solarwinds.com/...ter/security-advisories/CVE-2025-26394
documentation.solarwinds.com/...hco_2025-2_release_notes.htm
Support options
