← Back to the feed

~/article/solarwinds-patches-arm-hard-coded-key-flaw-enabling-unauthenticated-rce-10h3td
highSource: The Hacker News

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability. The vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior. "SolarWinds

Read at the source

Summary written for cymesh.dev. The full article lives at The Hacker News.

Referenced CVEs

Topics

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Related

~/related/solarwinds-patches-arm-hard-coded-key-flaw-enabling-unauthenticated-rce-10h3td