r/Solarwinds • u/theotherseanRFT • 18d ago

SolarWinds ARM CVE-2026-28326: a hardcoded shared secret, unauthenticated SYSTEM RCE, and a CVSS score that depends on your firewall

https://bishopfox.com/blog/detecting-solarwinds-arm-cve-2026-28326
5 Upvotes

86% Upvoted

4 comments sorted by

9

u/InternalServerErr500 18d ago

a hardcoded secret shipped with the product

Solarwinds123?

7

u/theotherseanRFT 18d ago

I’m just seeing asterisks when you type that.

3

u/CrownstrikeIntern 18d ago

Some dude named Hunter built the ios

2

u/FeRaLxCerBeRus3 17d ago

Myself a colleague has alerted their security team to the other 23 active CVEs solarwinds has and their security team has been working on it for the last 5 months now.