September 20, 2026 · 11 min read
SolarWinds shipped a hard-coded key in Access Rights Manager - unauthenticated RCE is the result
SolarWinds patched a CVSS 8.8 unauthenticated RCE in Access Rights Manager on 17 September 2026, caused by a hard-coded key shipped in the product.
Read more →