SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-19 09:31 UTC
  • Importiert: 2026-09-25 06:20 UTC
  • CVSS: 8.8
  • Quelle-ID: thn_global
  • uid_hash: 23b577b3c4d62bb1a4ccb198560507b62472a1733386dc6e6362c51d0bb58211

Inhalt

SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.

The vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.

"SolarWinds

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-28326

HIGH

8.8

HIGH

8.8

2026-09-17

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews