Product
Access Rights Manager
- First Reported
- Sep 19, 2026
- Latest Reported
- Sep 24, 2026
Reported Context (2)
- Tracked as CVE-2026-28326 (CVSS score of 8.8) and affecting SolarWinds’s Access Rights Manager (ARM), it exists because ARM versions up to 2026.2 contain a hardcoded static key. SolarWinds Patches Unauthenticated RCE Flaws in Observability Self-Hosted
- SolarWinds has patched a high-severity vulnerability in Access Rights Manager, tracked as CVE-2026-28326, that could allow unauthenticated remote code execution due to a hard-coded static key. SolarWinds Patches Access Rights Manager Flaw Enabling Unauthenticated RCE
CVE (7)
People (1)
Vendors (1)
Products (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.