CVE-2026-28331: SolarWinds Patch Manager Sensitive Information Exposure Vulnerability
Published Oct 20, 2026
·Updated
SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges.
Affected Software
1 affected component
SolarWinds Patch Manager
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Patch Managerto a version that resolves this vulnerability.Fixed in 2026.4
Event History
Oct 20, 2026
CVE Published
via MITRE·04:11 PM
Data Sourced
via MITRE·04:11 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker needs local access and high privileges on the affected system. No user interaction is required.
2
What is the expected security impact?
The vulnerability can expose sensitive information, affecting confidentiality. The provided metrics do not indicate integrity or availability impact.