important · Enterprise — SolarWinds ARM
A shared static key lets an adjacent unauthenticated host execute code on SolarWinds Access Rights Manager.
Affects
SolarWinds Access Rights Manager, Windows-hosted identity and access-rights administration servers and collectors.
An adjacent host can use the product-wide key to cross a trusted component-communication boundary and reach code execution in the service context.
Detail and 1 source
SolarWinds identifies 2026.2.1 as the security release.