CVE-2024-28991: SolarWinds Access Rights Manager

High severity, CVSS 8.0. EPSS: 3.1% chance of exploitation in the next 30 days.

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this vulnerability would allow an authenticated user to abuse the service, resulting in remote code execution.

Affected products

• SolarWinds Access Rights Manager: before 2024.3.1 (fixed in 2024.3.1)

Published 2024-09-12. Last modified 2026-06-17.