Splunk and SolarWinds Patch Critical RCE and Data Exposure Flaws

Splunk released updates for Splunk Enterprise (9.4.16, 10.0.11, 10.2.8, 10.4.4) fixing 16 CVEs, including critical CVE-2026-76299 and CVE-2026-76302, plus 15 flaws in SOAR 8.7.0. SolarWinds fixed high-severity CVE-2026-28328 in Observability and medium XSS/SSRF issues in version 2026.4.

• Splunk Enterprise: 16 CVEs, including critical CVE-2026-76299 and CVE-2026-76302
• Splunk SOAR 8.7.0: 15 CVEs in code and over a dozen in third-party libraries
• SolarWinds Observability 2026.4: high-severity CVE-2026-28328 authorization flaw
• SolarWinds Patch Manager 2026.4: medium-severity information disclosure bug