AR
Product
Access Rights Manager
by SolarWinds · last CVE Sep 17, 2026
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
VulnerabilityHigh
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability. The vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior. "SolarWinds
Sep 19, 2026·The Hacker News