https://curasec.metacog.co.kr/tags/solarwinds/Recent content in Solarwinds on CuraSecHugoen-usSat, 19 Sep 2026 14:22:25 +0000https://curasec.metacog.co.kr/insights/2026-09-19-solarwinds-patches-arm-hard-coded-key-flaw-enabling-unauthen/Sat, 19 Sep 2026 14:22:25 +0000https://curasec.metacog.co.kr/insights/2026-09-19-solarwinds-patches-arm-hard-coded-key-flaw-enabling-unauthen/<ul> <li><strong>Engineer — Plan:</strong> CVSS 8.8 unauthenticated RCE via hard-coded key is a serious class of flaw, but EPSS is 0.01 with no KEV listing and no public PoC — patch ARM beyond version 2026.2 on your next patch cycle rather than treating it as emergency.</li> <li><strong>SOC/IR — Skip</strong></li> <li><strong>Leader — Skip</strong></li> <li><strong>Signals:</strong> CVE-2026-28326 — CISA KEV: not listed, EPSS 0.01, no public PoC found</li> </ul>