Splunk, SolarWinds Release Fresh Security Updates

Splunk Fixes 24 Security Flaws, Including Four Critical Vulnerabilities in Enterprise and SOAR

Splunk has released security updates for 24 vulnerabilities in Splunk Enterprise and Splunk SOAR, including four critical flaws with CVSS scores from 9.3 to 9.9. Splunk published the fixes on October 21, 2026, across three advisories covering access control, input handling, exposed files, remote code execution, denial of service, and weak authorization checks. The Splunk […]

Critical Splunk Enterprise Vulnerability

CVE-2026-76268 is a critical missing authentication vulnerability in Splunk Enterprise. An unauthenticated attacker with network access to the Patroni REST API on a search head cluster member could execute attacker-controlled operating-system commands. Splunk rates the vulnerability 9.8 (Critical) under CVSS v3.1. Its advisory does not report active exploitation. Splunk Vulnerability Disclosure A… Source

Splunk, SolarWinds Release Fresh Security Updates

Splunk and SolarWinds have released patches for multiple critical- and high-severity vulnerabilities across their products.

Splunk Patches Three Critical 9.9 Flaws and Two RCEs

Splunk's October 21 security updates address three critical CVSS 9.9 vulnerabilities and two authenticated RCE flaws. Here's what administrators need to patch.