Buyer’s guide ranks 12 file integrity monitoring tools for 2026
The guide scores change reconciliation, who-data, PCI reporting, agent cost and pricing, and flags dormant open-source projects.
22
Vendor
SolarWinds
- Mentions · 7d1
- Mentions · 30d4
- All mentions11
- First seenSep 9, 2026
- Last mentioned3d ago
Timeline
11 articles · newest firstSplunk and SolarWinds patch code execution and access flaws
Fixes cover 16 product CVEs in Splunk Enterprise, 15 in SOAR, plus Observability and Patch Manager bugs.
66
SolarWinds Observability Self-Hosted before 2026.4 has broken authorization
Canada’s Cyber Centre points administrators to CVE-2026-28328 and says to apply SolarWinds updates when available.
42
New infosec products of the week: October 16, 2026
NinjaOne, Qualys, Scytale, and SolarWinds released agentic AI tools for IT operations, compliance, and remediation.
28
An OpenAI Agent Hacked Australia's Health Service. Their Government Found Out Months Later.
SolarWinds has patched two RCE vulnerabilities in Observability Self-Hosted, affecting all versions up to 2026.2.3.
70
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted, with no exploitation reported.
67
SolarWinds security advisory (AV26-950)
Canadian Cyber Centre advisory warns of unauthenticated and authenticated RCE flaws in SolarWinds Observability Self-Hosted.
45
Critical SolarWinds Flaws Let Attackers Remotely Execute Code on Observability Servers
SolarWinds patches critical CVEs allowing unauthenticated RCE on Observability Self-Hosted servers in non-default configs.
65
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
SolarWinds patched CVE-2026-28326 (CVSS 8.8), a hard-coded-key flaw enabling unauthenticated remote code execution in Access Rights Manager 2026.2 and prior.
62
SolarWinds security advisory (AV26-941)
Canadian Cyber Centre alerts on unauthenticated RCE vulnerability CVE-2026-28326 in SolarWinds Access Rights Manager before 2026.2.
38
Top 10 Best Patch Management Software in 2026
Roundup ranks 2026 patch management software, favoring Automox, Action1's free tier and Tanium, and warns buyers to vet patching platform security.
14
Related CVEs
by mentions- SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks
- SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability stemming from deserialization of…
- CVE-2026-28326<1%8.8Unauthenticated RCE in SolarWinds Access Rights Manager via hardcoded static key
- Broken authorization in SolarWinds Observability Self-Hosted
- Improper neutralization in Cisco software (low-privilege network)
- CVE-2026-28323<1%9.8SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability
- CVE-2026-28304<1%9.1SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root
- CVE-2026-28321<1%9.1SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate…
- CVE-2026-28299<1%7.5SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due…
- As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review
Appears with
- SolarWindsorganization · 3
- SolarWinds Observability Self-Hostedproduct · 3
- Access Rights Managerproduct · 3
- Canadian Centre for Cyber Securityorganization · 3
- Armadinorganization · 2
- Qualysvendor · 2
- Observability Self-Hostedproduct · 2
- JetBrainsorganization · 1
- ManageEnginevendor · 1
- Claudeai model · 1
- Web Help Deskproduct · 1
- Patch Managerproduct · 1
- ChatGPTai model · 1
- NinjaOne MCPproduct · 1
- Scytalevendor · 1
- SolarWindsproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.