🟠High: SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
-
SolarWinds has released security updates to fix a high-severity vulnerability in Access Rights Manager (ARM) that could allow unauthenticated remote code execution. The flaw is tracked as CVE-2026-28326 and carries a CVSS score of 8.8 out of 10.0. It affects all versions of Access Rights Manager 2026.2 and prior.
According to the available details, the issue involves a hard-coded key. Successful exploitation could let an unauthenticated attacker execute code remotely, which makes timely patching important for any organization running the affected product.
Affected versions:
- Access Rights Manager 2026.2 and all earlier versions
Recommended actions:
- Update Access Rights Manager to a version later than 2026.2 as provided by SolarWinds
- Review exposure of ARM instances and restrict network access where possible
- Monitor for signs of exploitation while applying the fix
Source: The Hacker News
Does your organization run SolarWinds ARM, and if so, how quickly are you able to roll out this patch?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login