SPLUNK and SolarWinds have released a new wave of security updates this week, addressing a range of flaws that could enable code execution, privilege escalation, information disclosure and other impacts. Splunk’s patches cover Splunk Enterprise and Splunk SOAR, with multiple fixes across 16 CVEs in the product code and more than a dozen in third‑party libraries.
Splunk Enterprise updates for versions 9.4.16, 10.0.11, 10.2.8 and 10.4.4 resolve critical‑severity issues such as improper access control and improper neutralisation, along with high‑severity remote code execution (RCE), DoS and authorization bypass weaknesses. Splunk SOAR 8.7.0 also patches 15 vulnerabilities in its code and over a dozen in third‑party libraries, including critical‑severity CVEs CVE‑2026‑76531 and CVE‑2026‑76407 related to data exposure and access control. The advisory notes these fixes address high‑severity information disclosure, improper neutralisation and resource‑control problems, among others.
SolarWinds followed with fixes for a high‑severity flaw in Observability that could let low‑privileged users access restricted information, tracked as CVE‑2026‑28328, described as a broken authorization schema issue. In addition, the company released updates for medium‑severity XSS and SSRF vulnerabilities in Observability and a medium‑severity information disclosure bug in Patch Manager. Affected releases include Observability Self‑Hosted version 2026.4 and Patch Manager version 2026.4. The report highlights that these patches are designed to mitigate potential exploitation and reduce exposure across both vendors’ products.