CVE-2026-28326 2

Vulnerability (CVE)

Solar Winds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

SolarWinds released security updates for a high-severity flaw in Access Rights Manager (ARM), tracked as CVE-2026-28326 and rated 8.8 out of 10.0 on the CVSS scale, that could allow unauthenticated remote code execution and stems from a hard-coded static...

Vulnerabilities & Patching

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, Click Fix Attacks, Click Fix Surge, and Browser Hijacks

Cyber Risks The Hacker News

Cisco warned of a maximum-severity authentication bypass in Identity Services Engine, tracked as CVE-2026-76460 with a CVSS score of 10.0, that is under active exploitation and stems from insufficient authentication control on an API endpoint. The week's...

Vulnerabilities & Patching