CVE-2026-28331

EUVD-2026-105173
SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.4 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 8.44%
Common Weakness Enumeration
References
https://documentation.solarwinds.com/en/success_center/patchman/content/release_notes/patchman_2026-4_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28331