This week, Splunk and SolarWinds released important security updates to address several vulnerabilities that could lead to significant security risks. Splunk's updates target its Enterprise and SOAR products, resolving numerous security flaws including critical issues like improper access control and improper neutralization. The patches cover a total of 16 CVEs in Splunk Enterprise versions 9.4.16, 10.0.11, 10.2.8, and 10.4.4, addressing high-severity vulnerabilities such as remote code execution, denial-of-service, and authorization bypasses. The SOAR version 8.7.0 update also includes fixes for 15 vulnerabilities within its code and additional third-party library issues, focusing on data exposure and improper access control.

SolarWinds has released fixes for a high-severity vulnerability in its Observability platform that could potentially allow unauthorized access to restricted information. This flaw, tracked as CVE-2026-28328, involves a broken authorization schema. Additionally, SolarWinds addressed medium-severity issues related to XSS and SSRF vulnerabilities in Observability and an information disclosure flaw in Patch Manager. These vulnerabilities have been patched in Observability Self-Hosted version 2026.4 and Patch Manager version 2026.4.

Both companies highlight the critical nature of these updates, urging users to implement them promptly to avoid security breaches. Organizations using these products should prioritize patch management to mitigate risks associated with these vulnerabilities.