<![CDATA[🟠 High: SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE]]>

<![CDATA[🟠 High: SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE]]>SolarWinds has released security updates to fix a high-severity vulnerability in Access Rights Manager (ARM) that could allow unauthenticated remote code execution. The flaw is tracked as CVE-2026-28326 and carries a CVSS score of 8.8 out of 10.0. It affects all versions of Access Rights Manager 2026.2 and prior.

According to the available details, the issue involves a hard-coded key. Successful exploitation could let an unauthenticated attacker execute code remotely, which makes timely patching important for any organization running the affected product.

Affected versions:

Access Rights Manager 2026.2 and all earlier versions

Recommended actions:

Update Access Rights Manager to a version later than 2026.2 as provided by SolarWinds
Review exposure of ARM instances and restrict network access where possible
Monitor for signs of exploitation while applying the fix

Source: The Hacker News

Does your organization run SolarWinds ARM, and if so, how quickly are you able to roll out this patch?

]]>https://xploitlk.com/topic/390/high-solarwinds-patches-arm-hard-coded-key-flaw-enabling-unauthenticated-rceRSS for NodeTue, 27 Oct 2026 11:24:44 GMTSat, 19 Sep 2026 12:30:18 GMT60