{"vulnerability": "cve-2026-2832", "sightings": [{"uuid": "97de6d7d-6547-4cfb-8aec-91b840195a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mruvtcjthk2z", "content": "CVE-2026-28323 - web help desk\nIf enabled, a vulnerability in SolarWinds Web Help Desk could allow unauthorized access to the system. This means that someone might be able to access the system without needing a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#solarwinds #CVE #infosec", "creation_timestamp": "2026-07-30T16:56:04.516434Z"}, {"uuid": "5ab2adce-befe-4fab-994d-3a85d1338711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrvx7w6dy72z", "content": "A SolarWinds Web Help Desk SAML authentication bypass, CVE-2026-28323, scores a critical CVSS 9.8. Update to 2026.2.1 to stay protected.\n\n#SolarWinds #WebHelpDesk #CVE202628323 #SAML #InfoSec", "creation_timestamp": "2026-07-31T02:53:42.278462Z"}, {"uuid": "c2e4b598-dc82-4f5b-9a6e-e9810d8d9a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3muaoaxc25z23", "content": "~Arcticwolf~\nUnauthenticated WHD flaws enable session bypass and DoS; patch to 2026.2.1.\n-\nIOCs: CVE-2026-28323, CVE-2026-28299\n-\n#CVE202628299 #CVE202628323 #ThreatIntel", "creation_timestamp": "2026-08-29T20:02:53.038101Z"}, {"uuid": "7423debb-b5dd-4ec6-8708-0e73eaec4cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-766", "content": "", "creation_timestamp": "2026-07-31T16:45:13.561971Z"}, {"uuid": "9e695ca3-b93f-492f-8a7b-d4d5f16c194a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheid-in-solarwinds-web-help-desk-update-nu", "content": "", "creation_timestamp": "2026-07-31T16:45:18.337606Z"}, {"uuid": "60465d0e-5e01-4f2b-8455-58871f3c2296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3msk4dqxqxl2d", "content": "The latest update for #ArcticWolf includes \"SolarWinds Web #HelpDesk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299\" and \"Payroll Pirates: Strange New Tides in Business Email Compromise\".\n \n#cybersecurity #infosec #networks https://opsmtrs.com/2ZFbaTl", "creation_timestamp": "2026-08-08T03:18:33.574982Z"}, {"uuid": "ce3a306f-d056-4b39-b2ae-fb725c782936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3msrmyjzble2u", "content": "The latest update for #ArcticWolf includes \"Active #SupplyChain Attack on npm Packages (keyv, cacheable): Immediate Mitigation Required\" and \"SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299\".\n \n#cybersecurity #infosec #networks https://opsmtrs.com/2ZFbaTl", "creation_timestamp": "2026-08-11T03:05:09.105869Z"}, {"uuid": "eed82c68-333a-4d45-abbe-f08fa8e52d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28322", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mporrnzimn22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-28322 \u0432 SolarWinds Database Performance Analyzer: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/424EB2AC-F613-4113-B741-44CC6FD62914", "creation_timestamp": "2026-07-02T19:37:12.802353Z"}, {"uuid": "e71b1eec-db37-4ceb-9046-4860a382c51b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-28323", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117055370733606045", "content": "This post is from yesterday.\nNote: Arctic Wolf will sell your data without consent. you need to scroll to the bottom and opt out of being sold to unscrupulous third-parties. \nArctic Wolf: SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299 https://arcticwolf.com/resources/blog/cve-2026-28323-and-cve-2026-28299/ #infosec #vulnerability #privacy", "creation_timestamp": "2026-08-07T17:20:12.088822Z"}, {"uuid": "03a8b7e3-0cff-4c39-9bb1-e97e3a9274aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28321", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6aqgvkrk2e", "content": "CVE-2026-28321 - serv-u\nA security issue in Serv-U on Linux systems allows an attacker with domain administrator access to read and write sensitive files, potentially leading to a complete takeover of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#servu #solarwinds #CVE #infosec", "creation_timestamp": "2026-07-21T16:40:05.526098Z"}, {"uuid": "56fe1231-9a33-47b3-8b2b-734cec82b5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28321", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrkra34xdm2u", "content": "\ud83d\udccc CVE-2026-28321 - SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escal... https://www.cyberhub.blog/cves/CVE-2026-28321", "creation_timestamp": "2026-07-26T16:07:07.833572Z"}, {"uuid": "97e2e348-ed36-4610-b2ff-a7b25399cab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "Telegram/bPFyihRaKzYFH468IH6VZ8obvtNAU0Sx5WI3sylwbu3LVzU", "content": "", "creation_timestamp": "2026-09-04T05:00:05.576010Z"}, {"uuid": "048abe21-27f6-4271-9cd8-cdbd2c875b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28323", "type": "published-proof-of-concept", "source": "Telegram/bPFyihRaKzYFH468IH6VZ8obvtNAU0Sx5WI3sylwbu3LVzU", "content": "", "creation_timestamp": "2026-09-05T01:00:37.513673Z"}, {"uuid": "52b5f9d5-86fd-4dc1-9c72-ba4391bf8362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i3uesu6gf6led", "content": "CVE-2026-28326 - SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability\nCVE ID : CVE-2026-28326\n \n Published : Sept. 17, 2026, 4:30 p.m. | 35\u00a0minutes ago\n \n Description : SolarWinds Access Rights Manager was reported to be affected by an unauthent...", "creation_timestamp": "2026-09-17T17:52:22.517499Z"}, {"uuid": "1413b27e-80a7-4613-bd90-e160f471ec63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvqlef2zbp2x", "content": "SolarWinds Access Rights Manager\u306b\u30cf\u30fc\u30c9\u30b3\u30fc\u30c9\u3055\u308c\u305f\u9759\u7684\u30ad\u30fc\u306b\u3088\u308b\u8a8d\u8a3c\u4e0d\u8981\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u653b\u6483\u8005\u306f\u30ea\u30e2\u30fc\u30c8\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3068\u306a\u308b\u3002\nCVE-2026-28326 CVSS 8.8 | HIGH", "creation_timestamp": "2026-09-17T21:18:54.607407Z"}, {"uuid": "cb524e18-6835-40c7-9ff3-1c00ab924054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-941", "content": "", "creation_timestamp": "2026-09-18T20:15:02.575912Z"}, {"uuid": "d9f1cc2e-3c6d-499c-9150-de4f3ceeb00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mvunljroyd2g", "content": "SolarWinds Patches Hard-Coded Cryptographic Key in ARM: CVE-2026-28326", "creation_timestamp": "2026-09-19T12:09:22.109086Z"}, {"uuid": "98ad0de4-a580-4985-b869-3f71eef25565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/thehackernews/10105", "content": "\ud83d\udea8 A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\n\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.\n\nRead: https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-19T12:00:06.052324Z"}, {"uuid": "4595400b-c701-4626-88c8-47a4ae53902d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://gist.github.com/ichintu/9cb86acb682c54ea7f3ed1ba71a63335", "content": "This daily threat intelligence roundup highlights critical software vulnerabilities and emerging AI security risks. Key traditional threats include unauthenticated RCEs in SolarWinds Access Rights Manager (CVE-2026-28326, patched), Orkes Conductor (CVE-2026-58138, actively exploited), and a critical command injection flaw in Totolink routers (CVE-2026-93742, public exploit). A high-severity authenticated RCE also affects The Welcomizer WordPress plugin (CVE-2026-4327). On the AI front, Google\u2019s Gemini model accidentally breached real corporate systems during a May 2026 security test due to a domain mix-up, while industry discussions emphasize that prompt injection and LLM routing flaws have become primary security challenges in AI agent development. Collectively, the reports underscore a threat landscape defined by high-impact software exploits and rapidly evolving AI vulnerabilities.", "creation_timestamp": "2026-09-19T12:02:14.739543Z"}, {"uuid": "a8f5443d-a0ab-408c-b9d2-ea4fc7f3d4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvuplvrs5f2x", "content": "SolarWinds patched CVE-2026-28326 in Access Rights Manager, fixing a hard-coded key flaw that could allow unauthenticated RCE across version 20. Also addressed serious issues in Web Help Desk and Serv-U. #SolarWinds #ARM #RCE", "creation_timestamp": "2026-09-19T12:45:21.050789Z"}, {"uuid": "0175362c-de75-4414-9b08-d41f27e5bc56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "content": "SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.\n\nThe vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.\n\n\"SolarWinds", "creation_timestamp": "2026-09-19T13:00:34.729603Z"}, {"uuid": "a4f1e9f6-dfd7-42e2-b80a-81977e5d800e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/thehackernews/10105", "content": "\ud83d\udea8 A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\n\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.\n\nRead: https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T00:00:10.633341Z"}, {"uuid": "0438036e-f8e8-4ebf-a7b2-35ce9fc37eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/VulnerabilityNews/44501", "content": "SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE\n\nSolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.\n\nThe vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.\n\n\"SolarWinds\nhttps://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T01:00:04.742111Z"}, {"uuid": "8cb2557a-ef0d-41a0-9027-e58ed7e2738f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "content": "SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.\n\nThe vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.\n\n\"SolarWinds", "creation_timestamp": "2026-09-20T01:00:35.491537Z"}, {"uuid": "73fa88c7-b75c-4b47-bc3d-51dff4b34c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvw3jds2hu26", "content": "\ud83e\udd16 CVE-2026-28326 (CVSS 8.8): SolarWinds Access Rights Manager ships a hard-coded cryptographic key enabling unauthenticated RCE. Affects ARM 2026.2 and prior; patch released.\nhttps://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T01:51:19.411662Z"}, {"uuid": "b46fccd0-f765-4451-8ab9-128b4d5974e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mvwle6x7lq25", "content": "SolarWinds Fixes Critical ARM Vulnerability Allowing Remote Code\u00a0Execution\n\nSolarWinds has released a security update for Access Rights Manager to fix CVE-2026-28326, a high-severity vulnerability that could enable unauthenticated remote code execution.", "creation_timestamp": "2026-09-20T06:34:46.455672Z"}, {"uuid": "7645ab4c-1b95-4fe2-a47b-5f2ef462928c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-28326", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvwze6xbxs2b", "content": "SolarWinds ARM through 2026.2: hard-coded key enables unauthenticated RCE. CVE-2026-28326, CVSS 8.8. Patch to ARM\u2026 https://0daynews.com/articles/2026-09-20-solarwinds-arm-cve-2026-28326-hardcoded-key-rce/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2656", "creation_timestamp": "2026-09-20T10:45:19.044566Z"}, {"uuid": "f763ec09-1d0b-4de8-a9b8-f606d95aeba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvxkgxpaan24", "content": "SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE (CVE-2026-28326) #patchmanagement", "creation_timestamp": "2026-09-20T15:51:05.890210Z"}, {"uuid": "de81faaa-bc2c-4dbb-9fa4-230e57b2abce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117304453563682831", "content": "\ud83d\udea8 A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.\nRead: https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T17:05:13.405804Z"}, {"uuid": "3c1770ab-360c-4371-b589-95d1c73518b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/VulnerabilityNews/44501", "content": "SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE\n\nSolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.\n\nThe vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.\n\n\"SolarWinds\nhttps://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-21T00:00:07.757238Z"}, {"uuid": "633d15f4-0b6d-4ff0-b0c4-f65a4a2b737b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/CyberDispatch/3010", "content": "A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\n\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.", "creation_timestamp": "2026-09-21T13:00:04.659633Z"}, {"uuid": "5a4c5e84-f0f7-403b-8d28-ba5b6d4a86b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/CyberDispatch/3010", "content": "A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\n\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.", "creation_timestamp": "2026-09-22T00:00:10.010089Z"}, {"uuid": "d9659f66-4472-47a7-a6e5-d69081462662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "Telegram/1-EB3sD2oC0U6c2SZrR9j-FHDJPzOjVG4szn66l4DgZ9Jg", "content": "", "creation_timestamp": "2026-09-22T07:00:04.382633Z"}, {"uuid": "dade843f-057c-4fa7-9828-fa848a340242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw47lkmd6e2i", "content": "\ud83d\udd17 CVE : CVE-2026-28326", "creation_timestamp": "2026-09-22T12:20:07.464383Z"}, {"uuid": "76a62dc3-9ff2-4b0d-88c2-0ebd94e13c1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw543hhtp62t", "content": "CVE-2026-28324 - observability self-hosted\nIf SolarWinds Observability Self-Hosted is set up with custom, insecure settings, someone on the network can make the server run any program they choose without logging\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#solarwinds #CVE #infosec", "creation_timestamp": "2026-09-22T20:50:05.054661Z"}, {"uuid": "4550881e-193e-4471-83b1-0e29923013fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-28324", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117316837977938958", "content": "https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28324\n\nSolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.\n`sev:CRIT 9.8 - AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "creation_timestamp": "2026-09-22T21:34:45.024299Z"}, {"uuid": "34c34c3d-f57e-422f-b2d0-568ec99d375c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw5akqbdy622", "content": "\ud83d\udea8 CVE-2026-28324 \u2014 CVSS 9.8 CRITICAL\n\nSolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution v...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-28324\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T22:10:12.625543Z"}, {"uuid": "b0e6aea4-6f2f-4aea-90a1-50ff2d3615b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "Telegram/1-EB3sD2oC0U6c2SZrR9j-FHDJPzOjVG4szn66l4DgZ9Jg", "content": "", "creation_timestamp": "2026-09-23T00:00:27.384465Z"}, {"uuid": "87d0f98b-6121-4a3e-ab8f-43789ed21b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mw5k6x5qoa2n", "content": "SolarWinds Observability vulnerabilities allow RCE via CVE-2026-28324. Update to version 2026.2.3 to secure your monitoring infrastructure today.\n\n#SolarWinds #Cybersecurity #CVE202628324 #CVE202628325 #RCE #Infosec", "creation_timestamp": "2026-09-23T01:02:35.278434Z"}]}