Information Exposure Vulnerability in SolarWinds Patch Manager
CVE-2026-28331

4.4MEDIUM

Key Information:

Vendor

Solarwinds
Status
Patch Manager
Vendor
CVE Published:
20 October 2026

What is CVE-2026-28331?

SolarWinds Patch Manager has a vulnerability that allows local users to access sensitive information. This exposure could potentially enable these users to gain elevated privileges, thereby compromising the security of the system. It is crucial for organizations to be aware of this issue and take necessary measures to secure their systems against unauthorized data access.

Affected Version(s)

Patch Manager 2026.2 and all previous versions

References

https://documentation.solarwinds.com/en/success_center/pa...
release-notes
https://www.solarwinds.com/trust-center/security-advisori...
vendor-advisory

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

James Cavanaugh
.