Disclosure summary
A hardcoded authentication secret ships with every SolarWinds Access Rights Manager install, and reaching TCP 55555 is enough to hit a .NET deserialization sink. Bishop Fox confirm
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
bishopfox.com · RSS-adb8fb1dad74a49a574bf431cf125244eca
Open original source · Updated Sep 25, 2026
Master Key Included: Detecting SolarWinds ARM CVE-2026-28326
CVE mention in publisher metadata; check the original affected versions.
Original records & references
- NIST NVD record
- CVE Program record
- bishopfox.com — Publisher advisory
PUBLISHED 2026-09-25T09:00:00-04:00
MODIFIED 2026-09-25T09:00:00-04:00
INGESTED 2026-10-08T12:05:24-04:00