🚨 A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE. CVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation. Read: https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html