A hardcoded authentication secret ships with every SolarWinds Access Rights Manager install, and reaching TCP 55555 is enough to hit a .NET deserialization sink. Bishop Fox confirmed SYSTEM-level code execution, breaks down the root cause, and shares a safe detection tool for defenders.
Master Key Included: Detecting SolarWinds ARM CVE-2026-28326
calendar_today
September 25, 2026
domain
bishop-fox