SolarWinds security advisory (AV26-941)
Canadian Cyber Centre alerts on unauthenticated RCE vulnerability CVE-2026-28326 in SolarWinds Access Rights Manager before 2026.2.
The Canadian Centre for Cyber Security issued advisory AV26-941 for an unauthenticated remote code execution vulnerability, CVE-2026-28326, affecting SolarWinds Access Rights Manager versions prior to 2026.2. Administrators are encouraged to review the provided links and apply updates as they become available.
- CVE-2026-28326 enables unauthenticated remote code execution
- Affects SolarWinds Access Rights Manager prior to 2026.2
- Advisory AV26-941 dated September 18, 2026 urges prompt patching
- CVEs
- CVE-2026-28326
- Vendors
- SolarWinds
- Products
- Access Rights Manager
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-28326 | Unauthenticated RCE in SolarWinds Access Rights Manager via hardcoded static key | 8.8 | <1% | PoC |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-941 Date: September 18, 2026 As of September 17, 2026, SolarWinds is affected by a vulnerability in the following product: SolarWinds Access Rights Manager Prior to 2026. 2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.