Skip to content
Sign in
Artwork for Decrypted: The UK Cyber Briefing
Decrypted: The UK Cyber Briefing · September 21 · 4 min

SolarWinds fixes a hard-coded key in its access rights tool

SolarWinds has patched CVE-2026-28326, a hard-coded static key in Access Rights Manager that allows unauthenticated remote code execution. The NCSC's Code of Practice says to avoid this. Also: ShinyHunters defaces Clop's leak site, and the EU's KIDS Act meets the UK's under-16 plans. Sources SolarWinds security advisory: CVE-2026-28326 The Hacker News: SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE NCSC: Software Security Code of Practice implementation guidance, Theme 1 BleepingComputer: ShinyHunters hacks Clop leak site, threatens to extort ransomware gang IAPP: European Commission unveils EU KIDS Act Covington Global Policy Watch: Online Safety in the UK, social media ban for under 16s Read the written version

0:00-4:43
Play in
Transcript file

transcript

No transcript — this publisher did not publish one.

show notes

SolarWinds has patched CVE-2026-28326, a hard-coded static key in Access Rights Manager that allows unauthenticated remote code execution. The NCSC's Code of Practice says to avoid this. Also: ShinyHunters defaces Clop's leak site, and the EU's KIDS Act meets the UK's under-16 plans.

Sources

Read the written version

links7

more episodes

All episodes