SolarWinds 修复 ARM 硬编码密钥缺陷，允许未经身份验证的远程代码执行

SolarWinds 已发布安全更新，以解决 Access Rights Manager (ARM) 中的一个高严重性缺陷，如果成功利用，可能导致未经身份验证的远程代码执行漏洞。

该漏洞被追踪为 CVE-2026-28326，在 CVSS 评分系统中评级为 8.8（满分 10.0）。该问题影响所有版本的 Access Rights Manager 2026.2 及之前版本。

“SolarWinds Access Rights Manager 被报告受到未经身份验证的远程代码执行漏洞的影响，”SolarWinds 在 2026 年 9 月 17 日发布的公告中表示。“该问题源于一个硬编码的静态密钥。”

该公司将发现并报告该缺陷的安全研究员 Kai Huang 归功于 Armadin，该缺陷已在 ARM 2026.2.1 中修复。SolarWinds 没有提到该漏洞在野外被利用的情况。

这一发展发生在公司发布针对影响 Web Help Desk (WHD) 的关键缺陷的修复后近两个月，该缺陷 (CVE-2026-28323，CVSS 评分：9.8) 可能导致启用 SAML 2.0 身份验证方法时的 SAML 身份验证绕过。

另一个漏洞与拒绝服务 (DoS) 漏洞有关 (CVE-2026-28299，CVSS 评分：8.2)，可能导致 Web Help Desk 服务器因内存不足而崩溃。这两个问题已在 WHD 2026.2.1 中解决。

SolarWinds 还发布了针对影响 Serv-U 的 16 个缺陷的修复 (CVE-2026-28302，从 CVE-2026-28304 到 CVE-2026-28317，CVE-2026-28321，CVE-2026-28323)，这些缺陷可能导致特权升级、远程代码执行和管理员帐户的创建。

觉得这篇文章有趣吗？请在 Google 新闻、Twitter 和 LinkedIn 上关注我们，以阅读更多我们发布的独家内容。

相关漏洞

CVE-2026-28326 CVSS 8.8 HIGH Awaiting Analysis

CVE-2026-28326 - SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability

SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key.

CVE-2026-28323 CVSS 9.8 CRITICAL Analyzed

CVE-2026-28323 - SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability

SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.

CVE-2026-28321 CVSS 9.1 CRITICAL Analyzed

CVE-2026-28321 - SolarWinds Serv-U Broken Access Control Vulnerability

SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute code as root. A domain administrator access is required, and the impact is lower in Windows installations.

CVE-2026-28317 CVSS 9.1 CRITICAL Analyzed

CVE-2026-28317 - SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires domain administrator access. The impact is lower in Windows deployments.

CVE-2026-28304 CVSS 9.1 CRITICAL Analyzed

CVE-2026-28304 - SolarWinds Serv-U Remote Code Execution Vulnerability

SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in Windows deployments.

CVE-2026-28302 CVSS 9.1 CRITICAL Analyzed

CVE-2026-28302 - SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execution as root. This issue requires group administrator access. The impact is lower in Windows deployments.

CVE-2026-28299 CVSS 8.2 HIGH Analyzed

CVE-2026-28299 - SolarWinds Web Help Desk Denial-of-Service Vulnerability

SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.

SolarWinds 修复 ARM 硬编码密钥缺陷，允许未经身份验证的远程代码执行

相关漏洞

更多来自 The Hacker News