SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

SolarWinds released patches for Access Rights Manager fixing vulnerability CVE-2026-28326 with a CVSS score of 8.8 out of 10. The issue affects all ARM versions 2026.2 and older and allows unauthenticated remote code execution.

• Vulnerability CVE-2026-28326 scored 8.8 out of 10 on CVSS
• All versions of Access Rights Manager 2026.2 and older are affected
• Exploitation leads to remote code execution without authentication