{"id":"CVE-2026-28331","title":"SolarWinds Patch Manager Sensitive Information Exposure Vulnerability","summary":"SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges.","severity":"medium","cvss":4.4,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-200"],"vendor":"SolarWinds","product":"Patch Manager","affected":["patch_manager 2026.2 and all previous versions"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-20T16:59:20.456398Z"},"published":"2026-10-20","updated":"2026-10-20","sourceUpdated":"2026-10-20T16:59:30.352Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-28331","references":[{"url":"https://documentation.solarwinds.com/en/success_center/patchman/content/release_notes/patchman_2026-4_release_notes.htm"},{"url":"https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28331"}],"tags":["cve.org"],"ingestedAt":"2026-10-20T17:12:53.594Z","slug":"CVE-2026-28331","body":"## Overview\n\nSolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges.\n\n## Affected\n\n- `patch_manager 2026.2 and all previous versions`\n\n## Remediation\n\nSolarWinds recommends customers to upgrade to \n\nSolarWinds Patch Manager 2026.4 as soon as is practical.","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":24.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}