Tia N.List

Reported by 2 outlets

SolarWinds patches CVE-2026-28326 in Access Rights Manager, fixing an unauthenticated RCE flaw via hard-coded cryptographic key. CVSS 8.8. h

hot0.0
Why this score
Breadth
1.00 / 2.0 · 2 sources
Authority
1.80 / 2.0 · best outlet weight
Severity
3.50 / 5.0 · CVSS + content signals
Velocity
0.00 / 2.0 · updates in 48h
Pickup speed
0.37 / 0.6 · time to second source
Recency
× 0.00 temporal multiplier
Community
+ 0.00 / 1.5 · reddit signal
Score
0.0 / 10 = base × recency + community
deafnews.itthehackernews.com CVE-2026-28326 first seen 24d ago

Analysis

SolarWinds patches CVE-2026-28326 in Access Rights Manager, fixing an unauthenticated RCE flaw via hard-coded cryptographic key. CVSS 8.8. h covers recent security developments. Key references include CVE-2026-28326. The event content notes SolarWinds patches CVE-2026-28326 in Access Rights Manager, fixing an unauthenticated RCE flaw via hard-coded cryptographic key. CVSS 8.8. h

via Mastodon https://deafnews.it/en/article/solarwinds-patches-hard-coded-cryptographic-key-in-arm-cve-2026-28326

SolarWinds Access Rights Manager (ARM) unau. This matters because it affects systems users rely on. Watch for patches and confirmed exploitation updates.

Timeline

  1. original reporting

    SolarWinds patches CVE-2026-28326 in Access Rights Manager, fixing an unauthenticated RCE flaw via hard-coded cryptographic key. CVSS 8.8. h

    deafnews.it · 24d ago · September 19th, 2026

    SolarWinds patches CVE-2026-28326 in Access Rights Manager, fixing an unauthenticated RCE flaw via hard-coded cryptographic key. CVSS 8.8. h

    via Mastodon https://deafnews.it/en/article/solarwinds-patches-hard-coded-cryptographic-key-in-arm-cve-2026-28326

  2. mentioned by thehackernews.com

    SolarWinds Access Rights Manager (ARM) unauthenticated RCE… CVSS 8.8… due to a “hard-coded static key”. What year is it again? # infosec # s

    thehackernews.com · 24d ago · September 19th, 2026

  3. mentioned by thehackernews.com

    🤖 CVE-2026-28326 (CVSS 8.8): SolarWinds Access Rights Manager ships a hard-coded cryptographic key enabling unauthenticated RCE. Affects ARM

    thehackernews.com · 24d ago · September 20th, 2026

Covered in

digest 2026-09-20

Source on GitHub