● Covered by 1 source · 1 reportMedium impact1 neutral
Splunk and SolarWinds Release Security Updates for Code Execution, Privilege Escalation Flaws
Key points
- Splunk Enterprise updates fix 16 CVEs, including critical improper access control.
- Splunk SOAR updates address 15 vulnerabilities, including critical data exposure.
- SolarWinds Observability fixes a high-severity broken authorization schema (CVE-2026-28328).
- SolarWinds Patch Manager received a fix for a medium-severity information disclosure bug.
Splunk Enterprise and SOAR Patches
Splunk has released security updates for Splunk Enterprise and Splunk SOAR to resolve numerous security defects. Splunk Enterprise versions 9.4.16, 10.0.11, 10.2.8, and 10.4.4 include fixes for 16 CVEs. These include critical-severity improper access control (CVE-2026-76299) and improper neutralization (CVE-2026-76302) issues. High-severity remote code execution (RCE), denial-of-service (DoS), authorization bypasses, and improper resource control weaknesses were also addressed.
Splunk SOAR version 8.7.0 received patches for 15 vulnerabilities within its code and additional flaws in third-party libraries. The most critical issues resolved are CVE-2026-76531 (data exposure) and CVE-2026-76407 (improper access control). Other high-severity issues fixed include information disclosure, improper neutralization, improper resource control, and protection defects.
SolarWinds Observability and Patch Manager Updates
SolarWinds released fixes for a high-severity vulnerability in its Observability product, tracked as CVE-2026-28328. This flaw, described as a broken authorization schema, could allow low-privileged users to access restricted information. Observability Self-Hosted version 2026.4 contains the patch for this issue.
Additionally, SolarWinds addressed medium-severity cross-site scripting (XSS) and server-side request forgery (SSRF) vulnerabilities in Observability. A medium-severity information disclosure bug in Patch Manager was also resolved, with fixes included in Patch Manager version 2026.4.
Impact of the Updates
These updates are important for users of Splunk and SolarWinds products to mitigate risks associated with code execution, privilege escalation, denial-of-service, and information disclosure. Applying these patches helps protect systems from potential exploitation by malicious actors.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
CVE CVE-2026-762999.9 CRITICAL CVE CVE-2026-763029.9 CRITICAL CVE CVE-2026-765319.9 CRITICAL CVE CVE-2026-76407 CVE CVE-2026-283288.8 HIGHReporting from
Splunk released security updates for Splunk Enterprise and SOAR, addressing dozens of vulnerabilities including critical improper access control and data exposure issues. SolarWinds also issued patches for its Observability and Patch Manager products, fixing a high-severity authorization flaw and other medium-severity bugs.