Post-Patch Verification for CVE-2026-28328: Policy, Logs and Access Reviews

CVE-2026-28328 affects SolarWinds Observability Self-Hosted, where a broken authorization schema allows low-privileged users to access and modify unauthorized information. This CWE-863 vulnerability has a CVSS 3.1 base score of 8.8, impacting version 2026.2.3 and earlier. While ZoomEye identifies network visibility, it cannot confirm specific build flaws. Responders must perform local version checks, verify role boundaries, and review audit logs, as the vendor advisory provides no exploit indicators to distinguish facts from patterns.