CVE-2026-28326
SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key.
CVSS score8.8 / 10
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness type (CWE)CWE-321
Related articles
Three SolarWinds RCE Flaws Expose Monitoring and Access-Control Deployments
SolarWinds fixed three unauthenticated RCE flaws in Observability Self-Hosted and Access Rights Manager, including CVE-2026-28324. No exploits observed.
Exploited Cisco ISE Flaw Leads a Wave of Attacks on Trusted Software Channels
Active exploitation of a critical Cisco ISE flaw highlights attacks through trusted software channels, Orkes, Discourse, libheif and AI plugins.
This product uses the NVD API but is not endorsed or certified by the NVD.