SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability (CVE-2026-28326)
Summary
SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key.
Affected Products
SolarWinds Access Rights Manager 2026.2 and all previous versions
Fixed Software Release
SolarWinds Access Rights Manager 2026.2.1
Acknowledgments
Kai Huang from Armadin
Advisory Details
Severity
8.8 High
Advisory ID
First Published
9/17/2026
Fixed Version
SolarWinds Access Rights Manager 2026.2.1