---
id: 8828
title: "Master Key Included: Detecting SolarWinds ARM CVE-2026-28326"
cve: CVE-2026-28326
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/detecting-solarwinds-arm-cve-2026-28326"
published_at: "2025-04-11T00:00:00Z"
tags: ["rce", "deserialization", "detection", "solarwinds", "cve-2026-28326", "hardcoded-secret"]
phying_url: "https://phying.com/item/8828"
lang: en
---

# Master Key Included: Detecting SolarWinds ARM CVE-2026-28326

## Summary

CVE-2026-28326 is an unauthenticated RCE in SolarWinds ARM where a hardcoded shared secret on TCP 55555 leads to SYSTEM-level code execution. Patch now.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2026-28326
- **Published:** 2025-04-11T00:00:00Z
- **Original:** https://bishopfox.com/blog/detecting-solarwinds-arm-cve-2026-28326
- **Phying News:** https://phying.com/item/8828