Splunk, SolarWinds Release Fresh Security Updates

Splunk released security updates for Splunk Enterprise versions 9.4.16, 10.0.11, 10.2.8, and 10.4.4 addressing 16 CVEs including critical improper access control and neutralization issues (e.g., CVE-2026-76299, CVE-2026-76302). Splunk SOAR version 8.7.0 patches 15 vulnerabilities including critical data exposure and access control flaws (CVE-2026-76531, CVE-2026-76407). SolarWinds patched a high-severity broken authorization schema vulnerability in Observability (CVE-2026-28328) and medium-severity XSS, SSRF, and information disclosure bugs in Observability Self-Hosted 2026.4 and Patch Manager 2026.4. These updates collectively mitigate risks of remote code execution, privilege escalation, denial-of-service, and sensitive data leakage.

If unpatched, these vulnerabilities could allow attackers to execute arbitrary code, escalate privileges, bypass authorization controls, cause denial-of-service conditions, and access or leak sensitive information. The flaws affect core product functionality and third-party components, increasing the attack surface. Successful exploitation could compromise confidentiality, integrity, and availability of affected systems.

Security updates have been released by Splunk and SolarWinds to address these vulnerabilities. Users should apply the official patches for Splunk Enterprise (versions 9.4.16, 10.0.11, 10.2.8, 10.4.4), Splunk SOAR (version 8.7.0), SolarWinds Observability Self-Hosted (2026.4), and Patch Manager (2026.4) as soon as possible. No additional mitigation steps are indicated beyond applying these vendor-provided fixes.