CVE-2026-28331

Published: Oct 20, 2026Modified: Oct 20, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: psirt@solarwinds.com

Description

SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges.

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://documentation.solarwinds.com/en/success_center/patchman/content/release_notes/patchman_2026-4_release_notes.htm

Source: psirt@solarwinds.com

https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28331

Source: psirt@solarwinds.com

Timeline

No history available yet.