Splunk, SolarWinds Release Fresh Security Updates
Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.
Splunk and SolarWinds this week released patches for multiple vulnerabilities, including flaws leading to code execution, privilege escalation, denial-of-service (DoS), and information disclosure.
On Wednesday, Splunk rolled out security updates for Splunk Enterprise and SOAR to resolve dozens of security defects, including multiple flaws in third-party packages.
Splunk Enterprise versions 9.4.16, 10.0.11, 10.2.8, and 10.4.4 were rolled out with fixes for 16 CVEs in the product’s code, including CVE-2026-76299 and CVE-2026-76302, critical-severity improper access control and improper neutralization issues.
High-severity remote code execution (RCE), DoS, authorization bypasses, and improper resource control weaknesses were also addressed.
Splunk SOAR version 8.7.0 was released with patches for 15 vulnerabilities in its code and over a dozen in third-party libraries. The most severe are CVE-2026-76531 and CVE-2026-76407, critical-severity data exposure and improper access control issues.
The update also resolves high-severity information disclosure, improper neutralization, improper resource control, and protection defects.
SolarWinds released fixes for a high-severity bug in Observability that could allow low-privileged users to access restricted information. Tracked as CVE-2026-28328, the flaw is described as a broken authorization schema issue.
Additionally, the company released security updates that address medium-severity XSS and SSRF vulnerabilities in Observability, and a medium-severity information disclosure bug in Patch Manager.
Observability Self-Hosted version 2026.4 and Patch Manager version 2026.4 contain patches for these security defects.
