High severity8.8NVD Advisory· Published Sep 17, 2026· Updated Sep 18, 2026

CVE-2026-28326

Description

SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SolarWinds/Access Rights Managerllm-fuzzy

Patches

Vulnerability mechanics

References

documentation.solarwinds.com/en/success_center/arm/content/secure-your-arm-deployment.htmnvd
documentation.solarwinds.com/en/success_center/whd/content/release_notes/arm_2026-2-1_release_notes.htmnvd
www.solarwinds.com/trust-center/security-advisories/CVE-2026-28326nvd

News mentions

SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
SecurityWeek · Sep 24, 2026
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks
The Hacker News · Sep 21, 2026
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
The Hacker News · Sep 19, 2026

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000