Splunk, SolarWinds Release Fresh Security Updates
Splunk and SolarWinds this week released patches for multiple vulnerabilities, including flaws leading to code execution, privilege escalation, denial-of-service (DoS), and information disclosure.
On Wednesday, Splunk rolled out security updates for Splunk Enterprise and SOAR to resolve dozens of security defects, including multiple flaws in third-party packages.
Splunk Enterprise versions 9.4.16, 10.0.11, 10.2.8, and 10.4.4 were rolled out with fixes for 16 CVEs in the product’s code, including CVE-2026-76299 and CVE-2026-76302, critical-severity improper access control and improper neutralization issues.
High-severity remote code execution (RCE), DoS, authorization bypasses, and improper resource control weaknesses were also addressed.
Splunk SOAR version 8.7.0 was released with patches for 15 vulnerabilities in its code and over a dozen in third-party libraries. The most severe are CVE-2026-76531 and CVE-2026-76407, critical-severity data exposure and improper access control issues.
The update also resolves high-severity information disclosure, improper neutralization, improper resource control, and protection defects.
Advertisement. Scroll to continue...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
