TGViewer
RedTeam feed RedTeam feed @redteamfeed · 604 subscribers
Post #1678 46
Master Key Included: Detecting SolarWinds ARM CVE-2026-28326
#bishopfox

A hardcoded authentication secret ships with every SolarWinds Access Rights Manager install, and reaching TCP 55555 is enough to hit a .NET deserialization sink. Bishop Fox confirmed SYSTEM-level code execution, breaks down the root cause, and shares a safe detection tool for defenders.

via BishopFox Blog
Open in Telegram All posts from @redteamfeed
More from @redteamfeed
  1. Sep 24, 2026Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications #bishopf…
  2. Sep 24, 2026Red Siege at Wild West Hackin’ Fest Deadwood 2026: What to Expect #redsiege As proud spons…
  3. Sep 24, 2026AI for Offensive Security: What Works, What Does Not, and How to Adopt It #specterops Comp…
  4. Sep 24, 2026What's New in hate_crack Since 2.0 #trustedsec &LTp>Part 1 of 3. This post is the referenc…
  5. Sep 23, 2026HTTP/3 in Burp Suite - it’s time to find a bigger wordlist #portswigger How many bugs have…
  6. Sep 18, 2026From Fork to Framework: What Modifying Apollo Taught Us About Agent Invasion #bishopfox Fo…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →