SolarWinds Patch Manager Local Info Disclosure Enables Priv Esc
CVE-2026-28331 Published on October 20, 2026
SolarWinds Patch Manager Sensitive Information Exposure Vulnerability
SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges.
Vulnerability Analysis
CVE-2026-28331 can be exploited with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Type
What is an Information Disclosure Vulnerability?
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CVE-2026-28331 has been classified to as an Information Disclosure vulnerability or weakness.
Products Associated with CVE-2026-28331
Want to know whenever a new CVE is published for SolarWinds Patch Manager? stack.watch will email you.
