{"vulnerability": "cve-2026-28326", "sightings": [{"uuid": "52b5f9d5-86fd-4dc1-9c72-ba4391bf8362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i3uesu6gf6led", "content": "CVE-2026-28326 - SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability\nCVE ID : CVE-2026-28326\n \n Published : Sept. 17, 2026, 4:30 p.m. | 35\u00a0minutes ago\n \n Description : SolarWinds Access Rights Manager was reported to be affected by an unauthent...", "creation_timestamp": "2026-09-17T17:52:22.517499Z"}, {"uuid": "1413b27e-80a7-4613-bd90-e160f471ec63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvqlef2zbp2x", "content": "SolarWinds Access Rights Manager\u306b\u30cf\u30fc\u30c9\u30b3\u30fc\u30c9\u3055\u308c\u305f\u9759\u7684\u30ad\u30fc\u306b\u3088\u308b\u8a8d\u8a3c\u4e0d\u8981\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u653b\u6483\u8005\u306f\u30ea\u30e2\u30fc\u30c8\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3068\u306a\u308b\u3002\nCVE-2026-28326 CVSS 8.8 | HIGH", "creation_timestamp": "2026-09-17T21:18:54.607407Z"}, {"uuid": "cb524e18-6835-40c7-9ff3-1c00ab924054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-941", "content": "", "creation_timestamp": "2026-09-18T20:15:02.575912Z"}, {"uuid": "d9f1cc2e-3c6d-499c-9150-de4f3ceeb00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mvunljroyd2g", "content": "SolarWinds Patches Hard-Coded Cryptographic Key in ARM: CVE-2026-28326", "creation_timestamp": "2026-09-19T12:09:22.109086Z"}, {"uuid": "98ad0de4-a580-4985-b869-3f71eef25565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/thehackernews/10105", "content": "\ud83d\udea8 A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\n\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.\n\nRead: https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-19T12:00:06.052324Z"}, {"uuid": "4595400b-c701-4626-88c8-47a4ae53902d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://gist.github.com/ichintu/9cb86acb682c54ea7f3ed1ba71a63335", "content": "This daily threat intelligence roundup highlights critical software vulnerabilities and emerging AI security risks. Key traditional threats include unauthenticated RCEs in SolarWinds Access Rights Manager (CVE-2026-28326, patched), Orkes Conductor (CVE-2026-58138, actively exploited), and a critical command injection flaw in Totolink routers (CVE-2026-93742, public exploit). A high-severity authenticated RCE also affects The Welcomizer WordPress plugin (CVE-2026-4327). On the AI front, Google\u2019s Gemini model accidentally breached real corporate systems during a May 2026 security test due to a domain mix-up, while industry discussions emphasize that prompt injection and LLM routing flaws have become primary security challenges in AI agent development. Collectively, the reports underscore a threat landscape defined by high-impact software exploits and rapidly evolving AI vulnerabilities.", "creation_timestamp": "2026-09-19T12:02:14.739543Z"}, {"uuid": "a8f5443d-a0ab-408c-b9d2-ea4fc7f3d4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvuplvrs5f2x", "content": "SolarWinds patched CVE-2026-28326 in Access Rights Manager, fixing a hard-coded key flaw that could allow unauthenticated RCE across version 20. Also addressed serious issues in Web Help Desk and Serv-U. #SolarWinds #ARM #RCE", "creation_timestamp": "2026-09-19T12:45:21.050789Z"}, {"uuid": "0175362c-de75-4414-9b08-d41f27e5bc56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "content": "SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.\n\nThe vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.\n\n\"SolarWinds", "creation_timestamp": "2026-09-19T13:00:34.729603Z"}, {"uuid": "a4f1e9f6-dfd7-42e2-b80a-81977e5d800e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/thehackernews/10105", "content": "\ud83d\udea8 A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\n\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.\n\nRead: https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T00:00:10.633341Z"}, {"uuid": "0438036e-f8e8-4ebf-a7b2-35ce9fc37eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/VulnerabilityNews/44501", "content": "SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE\n\nSolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.\n\nThe vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.\n\n\"SolarWinds\nhttps://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T01:00:04.742111Z"}, {"uuid": "8cb2557a-ef0d-41a0-9027-e58ed7e2738f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "content": "SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.\n\nThe vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.\n\n\"SolarWinds", "creation_timestamp": "2026-09-20T01:00:35.491537Z"}, {"uuid": "73fa88c7-b75c-4b47-bc3d-51dff4b34c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvw3jds2hu26", "content": "\ud83e\udd16 CVE-2026-28326 (CVSS 8.8): SolarWinds Access Rights Manager ships a hard-coded cryptographic key enabling unauthenticated RCE. Affects ARM 2026.2 and prior; patch released.\nhttps://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T01:51:19.411662Z"}, {"uuid": "b46fccd0-f765-4451-8ab9-128b4d5974e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mvwle6x7lq25", "content": "SolarWinds Fixes Critical ARM Vulnerability Allowing Remote Code\u00a0Execution\n\nSolarWinds has released a security update for Access Rights Manager to fix CVE-2026-28326, a high-severity vulnerability that could enable unauthenticated remote code execution.", "creation_timestamp": "2026-09-20T06:34:46.455672Z"}, {"uuid": "7645ab4c-1b95-4fe2-a47b-5f2ef462928c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-28326", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvwze6xbxs2b", "content": "SolarWinds ARM through 2026.2: hard-coded key enables unauthenticated RCE. CVE-2026-28326, CVSS 8.8. Patch to ARM\u2026 https://0daynews.com/articles/2026-09-20-solarwinds-arm-cve-2026-28326-hardcoded-key-rce/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2656", "creation_timestamp": "2026-09-20T10:45:19.044566Z"}, {"uuid": "f763ec09-1d0b-4de8-a9b8-f606d95aeba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvxkgxpaan24", "content": "SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE (CVE-2026-28326) #patchmanagement", "creation_timestamp": "2026-09-20T15:51:05.890210Z"}, {"uuid": "de81faaa-bc2c-4dbb-9fa4-230e57b2abce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117304453563682831", "content": "\ud83d\udea8 A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.\nRead: https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T17:05:13.405804Z"}, {"uuid": "3c1770ab-360c-4371-b589-95d1c73518b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/VulnerabilityNews/44501", "content": "SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE\n\nSolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.\n\nThe vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.\n\n\"SolarWinds\nhttps://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-21T00:00:07.757238Z"}, {"uuid": "633d15f4-0b6d-4ff0-b0c4-f65a4a2b737b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/CyberDispatch/3010", "content": "A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\n\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.", "creation_timestamp": "2026-09-21T13:00:04.659633Z"}, {"uuid": "5a4c5e84-f0f7-403b-8d28-ba5b6d4a86b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/CyberDispatch/3010", "content": "A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\n\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.", "creation_timestamp": "2026-09-22T00:00:10.010089Z"}, {"uuid": "d9659f66-4472-47a7-a6e5-d69081462662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "Telegram/1-EB3sD2oC0U6c2SZrR9j-FHDJPzOjVG4szn66l4DgZ9Jg", "content": "", "creation_timestamp": "2026-09-22T07:00:04.382633Z"}, {"uuid": "dade843f-057c-4fa7-9828-fa848a340242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw47lkmd6e2i", "content": "\ud83d\udd17 CVE : CVE-2026-28326", "creation_timestamp": "2026-09-22T12:20:07.464383Z"}, {"uuid": "b0e6aea4-6f2f-4aea-90a1-50ff2d3615b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "Telegram/1-EB3sD2oC0U6c2SZrR9j-FHDJPzOjVG4szn66l4DgZ9Jg", "content": "", "creation_timestamp": "2026-09-23T00:00:27.384465Z"}]}