Splunk and SolarWinds patch code execution and access flaws
Original title: Splunk, SolarWinds Release Fresh Security Updates
Fixes cover 16 product CVEs in Splunk Enterprise, 15 in SOAR, plus Observability and Patch Manager bugs.
Splunk released updates for Splunk Enterprise and SOAR covering flaws in product code and third-party packages, including critical improper access control and data-exposure issues plus high-severity remote code execution. SolarWinds patched a high-severity broken authorization bug in Observability, tracked as CVE-2026-28328, and medium-severity XSS, SSRF, and information-disclosure issues. Fixed builds are named; exploitation is not discussed.
- Splunk Enterprise fixes ship in 9.4.16, 10.0.11, 10.2.8, and 10.4.4.
- Critical Enterprise issues are CVE-2026-76299 and CVE-2026-76302.
- SOAR 8.7.0 fixes CVE-2026-76531 and CVE-2026-76407, both rated critical.
- Observability Self-Hosted 2026.4 and Patch Manager 2026.4 include SolarWinds fixes.
Impact: Code execution, privilege issues, denial of service, or data exposure
| Product | Affected | Fixed in |
|---|---|---|
| Splunk Enterprise | — | 9.4.16, 10.0.11, 10.2.8, and 10.4.4 |
| Splunk SOAR | — | 8.7.0 |
| SolarWinds Observability Self-Hosted | — | 2026.4 |
| SolarWinds Patch Manager | — | 2026.4 |
- 1.Install Splunk Enterprise 9.4.16, 10.0.11, 10.2.8, or 10.4.4.
- 2.Update Splunk SOAR to 8.7.0.
- 3.Update Observability Self-Hosted and Patch Manager to 2026.4.
- Vendors
- SplunkSolarWinds
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-28328 | Broken authorization in SolarWinds Observability Self-Hosted | 8.8 | — | ||
| CVE-2026-76299 | Improper access control in unnamed Cisco software | 9.9 | — | ||
| CVE-2026-76302 | Improper neutralization in Cisco software (low-privilege network) | 9.9 | — | ||
| CVE-2026-76407 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review | — | — | ||
| CVE-2026-76531 | External file access in Cisco software (low privileges) | 9.9 | — |
From the original article
1 min read at securityweek.com
Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information. The post Splunk, SolarWinds Release Fresh Security Updates appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.