SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

As cited

Copy frozen at 2026-09-19 14:59 UTC (site build).

vulnerabilities

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

SolarWinds released patches for CVE-2026-28326, a high-severity flaw in Access Rights Manager (ARM) that permits unauthenticated remote code execution (RCE). The vulnerability, rated 8.8 on the Common Vulnerability Scoring System version 3.1, affects ARM 2026.2 and earlier versions.

Why it matters: Organizations running SolarWinds ARM 2026.2 or prior need to apply patches immediately to prevent unauthenticated attackers from executing code and gaining control of systems.

Source published

2026-09-19 09:31 UTC

First seen by Cybersecurity Tracker

2026-09-19 14:15 UTC