Bottom line: SolarWinds customers must prioritize patching the Access Rights Manager (ARM) flaw to prevent exploitation.
What's happening: The vulnerability, tracked as CVE-2026-28326, is a high-severity issue affecting SolarWinds customers worldwide, particularly in the US and EU. The SolarWinds Orion Platform, used by over 200,000 organizations, is impacted.
What to do: Security teams must review and apply the patch to all affected SolarWinds products, including Orion Platform, before the next scheduled maintenance window.