Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-28326
By Roy Kalfon |
20 September 2026
CVE-2026-28326 – SolarWinds Access Rights Manager hardcoded static key enables unauthenticated RCE
SolarWinds Access Rights Manager (ARM) contains a hardcoded static cryptographic key that reportedly enables unauthenticated remote code execution over the network. Affected versions: 2026.2 and all previous. Remediate by upgrading to 2026.2.1 and applying SolarWinds ARM hardening guidance.