SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

SolarWinds has issued security updates to fix a high-severity flaw in Access Rights Manager that could allow unauthenticated remote code execution if exploited. The vulnerability is rated 8.8 out of 10.0 on the CVSS scoring system and is identified as CVE-2026-28326. This issue affects all versions of Access Rights Manager 2026.2 and earlier. SolarWinds has taken action to address the flaw. The vulnerability could be exploited to achieve remote code execution without authentication.