Splunk and SolarWinds patch code execution and access flaws
Fixes cover 16 product CVEs in Splunk Enterprise, 15 in SOAR, plus Observability and Patch Manager bugs.
66
CVE-2026-76407
- CVSS
- —
- EPSS
- —
- Published
- ·
- Modified
Description · NVD
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76407 are related to improper access control and are grouped under the Common Weakness Enumeration (CWE) CWE-284.
- Weakness
- CWE-284
In the news
2 storiesSplunk patches 24 flaws, four critical, in Enterprise and SOAR
October 21 fixes cover CVSS 9.9 bugs; Secure Gateway also needs updates for two CVEs.
62