widely-deployed-product-advisoryinternet-facing-service-vulnerability
Unauthenticated RCE Affects SolarWinds Access Rights Manager
Patch & Detection Intelligence · 5 sources · Updated 1mo ago · First seen Sep 18, 2026
SolarWinds disclosed CVE-2026-28326, an unauthenticated remote code execution vulnerability in SolarWinds Access Rights Manager (ARM). An attacker could potentially execute code on affected systems without first authenticating. The flaw affects ARM releases earlier than version 2026.2.
SolarWinds issued guidance for the vulnerability, and the Canadian Centre for Cyber Security and Guyana National CIRT urged administrators to review the advisory and apply the available update. The referenced advisories do not report exploitation of CVE-2026-28326 in the wild.
Patch this, or something else?See real exploitation activity before you spend the cycle.
Triage this advisory
