CRITICAL Published July 17, 2024

CVE-2024-23466

SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges.

CVSS base score
9.6 (v3.1)
Severity
CRITICAL
Attack vector
Adjacent_network
Weakness
CWE-22
Last modified
November 3, 2026
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

solarwinds access rights manager

References

View full NVD advisory →

More solarwinds vulnerabilities

Published the same day

Related reading

← Back to CVE watch