anonhaven

CVE-2026-28326

HIGH CVSS 3.1: 8.8 EPSS 0.69%
Updated Sep 18, 2026
Solarwinds
Parameter Value
CVSS 8.8 (HIGH)
Type CWE-321
Vendor Solarwinds
Public PoC No

SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key.

Attack Parameters

Attack Vector
Adjacent
Requires local network access
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)

CWE-321

Vulnerable Products

solarwinds:access rights manager

References 3

https://documentation.solarwinds.com/en/success_center/arm/content/secure-your-…
psirt@solarwinds.com
https://documentation.solarwinds.com/en/success_center/whd/content/release_note…
psirt@solarwinds.com
https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28326
psirt@solarwinds.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-28323

Solarwinds

9.8

CVE-2026-28321

Solarwinds

9.1

CVE-2026-28317

Solarwinds

9.1

CVE-2026-28316

Solarwinds

9.1

CVE-2026-28315

Solarwinds

6.2