Splunk and SolarWinds Release Fresh Security Updates
Both enterprise software vendors have rolled out updates targeting critical and high-severity flaws that could allow code execution, privilege escalation, and information disclosure.
Radwan AbdulhadiEditor and technology writer
Overview of Security Updates
Splunk and SolarWinds have released patches for multiple critical- and high-severity vulnerabilities across their products, addressing flaws that could lead to code execution, privilege escalation, denial-of-service, and sensitive information disclosure.
These updates aim to secure enterprise deployments against potential exploitation by patching core code defects as well as issues residing in third-party packages.
Splunk Enterprise and SOAR Patches
On Wednesday, Splunk rolled out security updates for Splunk Enterprise and SOAR to resolve dozens of security defects, including multiple flaws in third-party packages. Further details can be tracked through official resources provided by Splunk.
Splunk Enterprise versions 9.4.16, 10.0.11, 10.2.8, and 10.4.4 were rolled out with fixes for 16 CVEs in the product’s code. These include CVE-2026-76299 and CVE-2026-76302, which are critical-severity improper access control and improper neutralization issues. Additional high-severity remote code execution, denial-of-service, authorization bypasses, and improper resource control weaknesses were also addressed.
Additionally, Splunk SOAR version 8.7.0 was released with patches for 15 vulnerabilities in its native code and over a dozen in third-party libraries. The most severe are CVE-2026-76531 and CVE-2026-76407, which represent critical-severity data exposure and improper access control issues. The update also resolves high-severity information disclosure, improper neutralization, improper resource control, and protection defects.
SolarWinds Observability and Patch Manager Fixes
SolarWinds released fixes for a high-severity bug in Observability that could allow low-privileged users to access restricted information. Tracked as CVE-2026-28328, the flaw is described as a broken authorization schema issue. Administrators can review these advisories directly on the SolarWinds platform.
Alongside the authorization fix, the company released security updates addressing medium-severity cross-site scripting and server-side request forgery vulnerabilities in Observability, as well as a medium-severity information disclosure bug in Patch Manager.
To secure environments against these defects, administrators should ensure they have updated to Observability Self-Hosted version 2026.4 and Patch Manager version 2026.4, which contain the necessary patches.
Broader Vulnerability Landscape
The latest updates from Splunk and SolarWinds arrive alongside a wider wave of enterprise security advisories across the technology sector. Organizations are continuously urged to monitor vendor channels and prioritize vulnerability management to mitigate active risks.
For more information on concurrent security disclosures, readers can review related reports covering similar industry patching cycles, such as the updates detailed by SecurityWeek.
Sources
- SecurityWeekSplunk, SolarWinds Release Fresh Security Updates
Continue chronologically
Related stories
Drupal Patches Critical RCE Vulnerabilities and Warns
Drupal has issued patches for two critical remote code execution vulnerabilities affecting supported versions and warned of potential exploits.
Microsoft October 2026 Patch Tuesday fixes 1,411 flaws
Microsoft's October 2026 Patch Tuesday addresses a record-breaking 1,411 flaws, featuring three zero-day vulnerabilities and new risk cohorts.
Android November 2026 Updates Patch Over 200 Vulnerabilities
Google has announced its November 2026 security updates for Android, addressing over 200 vulnerabilities, including a critical remote code execution flaw.
Ivanti Patches Two More Connect Secure Zero-Days
Ivanti releases security updates for two additional Connect Secure gateway flaws chained in zero-day attacks since October, following a prior bug fix.
