CVE-2019-9546

CVE-2019-9546 is a critical privilege escalation vulnerability affecting SolarWinds Orion Platform versions prior to 2018.4 Hotfix 2, specifically through its RabbitMQ service. With a CVSS score of 9.8, it presents a severe risk as it can be exploited remotely with low complexity, leading to complete compromise of confidentiality, integrity, and availability. Despite its high severity and a FAUCET Risk Score of 81/100, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, though one article mentions it in the context of potential Iranian cyber operations.