Splunk and SolarWinds patch code execution and access flaws
Fixes cover 16 product CVEs in Splunk Enterprise, 15 in SOAR, plus Observability and Patch Manager bugs.
66
CVE-2026-76531
External file access in Cisco software (low privileges)
- CVSS 3.1
- 9.9 critical
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Cisco grouped CVE-2026-76531 with internally found issues in which files or directories are accessible to external parties (CWE-552). A remote attacker with low privileges can reach the flaw over the network without user interaction. Successful exploitation can disclose, change, and disrupt data beyond the vulnerable component. Cisco has not named the affected product or builds.
What to do: Apply Cisco's software hardening update for CVE-2026-76531. No fixed version or workaround is named.
Description · NVD
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76531 are related to files or directories accessible to external parties and are grouped under the Common Weakness Enumeration (CWE) CWE-552.
- Weakness
- CWE-552
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
In the news
2 storiesSplunk patches 24 flaws, four critical, in Enterprise and SOAR
October 21 fixes cover CVSS 9.9 bugs; Secure Gateway also needs updates for two CVEs.
62