
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted, with no exploitation reported.
2
3 stories, newest first · one card per story

SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted, with no exploitation reported.

SolarWinds patched CVE-2026-28326 (CVSS 8.8), a hard-coded-key flaw enabling unauthenticated remote code execution in Access Rights Manager 2026.2 and prior.

Canadian Cyber Centre alerts on unauthenticated RCE vulnerability CVE-2026-28326 in SolarWinds Access Rights Manager before 2026.2.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views