[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJSLc6BNpO4GldReaK8JcqvC9dXWQ6BalhFQ1_On7s7c":3},{"article":4,"iocs":44,"watch_terms":61,"solutions":62,"lesson":152},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"c3c22300-953d-4ad9-b9ab-dbf76b76e5db","Splunk, SolarWinds Release Fresh Security Updates","splunk-solarwinds-release-fresh-security-updates-729d44","Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information. The post Splunk, SolarWinds Release Fresh Security Updates appeared first on SecurityWeek.","Splunk and SolarWinds have issued security advisories and patches for numerous vulnerabilities affecting their products. Splunk Enterprise and SOAR have received fixes for critical and high-severity flaws including improper access control, improper neutralization, and remote code execution. SolarWinds' Observability and Patch Manager products are also addressed, with patches for broken authorization, information disclosure, XSS, and SSRF vulnerabilities.","Splunk and SolarWinds release security updates for multiple vulnerabilities.","https:\u002F\u002Fwww.securityweek.com\u002Fsplunk-solarwinds-release-fresh-security-updates\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F07\u002Fsoftware-vulnerability-patch-update.jpg","2026-10-22T10:45:24+00:00","2026-10-22T12:00:04.277741+00:00",8,[17,20,22,24,26,29],{"name":18,"type":19},"Splunk Enterprise","product",{"name":21,"type":19},"Splunk SOAR",{"name":23,"type":19},"SolarWinds Observability",{"name":25,"type":19},"SolarWinds Patch Manager",{"name":27,"type":28},"Splunk","vendor",{"name":30,"type":28},"SolarWinds","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,39],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[45,49,52,55,58],{"type":46,"value":47,"context":48},"cve","CVE-2026-76299","Splunk Enterprise critical-severity improper access control vulnerability",{"type":46,"value":50,"context":51},"CVE-2026-76302","Splunk Enterprise critical-severity improper neutralization vulnerability",{"type":46,"value":53,"context":54},"CVE-2026-76531","Splunk SOAR critical-severity data exposure vulnerability",{"type":46,"value":56,"context":57},"CVE-2026-76407","Splunk SOAR critical-severity improper access control vulnerability",{"type":46,"value":59,"context":60},"CVE-2026-28328","SolarWinds Observability broken authorization schema vulnerability",[27,30,18],{"controls":63,"vendors":146},[64,93,118],{"slug":65,"name":66,"problem":67,"products":68},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[69,77,85],{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":94,"name":95,"problem":96,"products":97},"patch-management","Automated patch management","Known holes get closed in days, not months.",[98,106,114],{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":94,"product_name":115,"url":116,"description":117},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":43,"name":119,"problem":120,"products":121},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[122,130,138],{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",[147],{"slug":148,"name":27,"logo_path":149,"roles":150},"splunk","\u002Fvendor-logos\u002Fsplunk.png",[151],"affected",{"slug":153,"title":154,"body":155,"framework_refs":156,"framework_notes":164},"splunk-and-solarwinds-patch-critical-flaws-including-rce-and-broken-authorization","Splunk and SolarWinds Patch Critical Flaws Including RCE and Broken Authorization","Both Splunk and SolarWinds have released security updates addressing a range of critical and high-severity vulnerabilities, including remote code execution, improper access control, broken authorization, cross-site scripting (XSS), and server-side request forgery (SSRF). These products are widely deployed in enterprise security and IT operations environments, making them high-value targets for attackers seeking to pivot across networks or exfiltrate sensitive data. The presence of remote code execution and broken authorization vulnerabilities in security tooling is particularly dangerous, as compromise of these systems can blind defenders and grant attackers administrative control. Delays in applying vendor-issued patches leave organizations exposed during the window between public disclosure and remediation, a gap that threat actors actively exploit.",[157,158,159,160,161,162,163],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","PCI DSS Requirement 6","NIS2 Article 21(2)(b)",{"NIS2 Article 21(2)(b)":165,"PCI DSS Requirement 6":166,"NIST SP 800-53 SI-2: Flaw Remediation":167,"OWASP A06:2021 Vulnerable and Outdated Components":168,"CIS Control 7: Continuous Vulnerability Management":169,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":170,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":171},"NIS2 requires essential and important entities to handle incidents and manage vulnerabilities through appropriate technical measures, including timely patching of critical systems like security monitoring and IT management platforms.","PCI DSS Requirement 6 mandates protecting systems and software from known vulnerabilities through patching; organizations using Splunk or SolarWinds in cardholder data environments must apply these patches to remain compliant.","SI-2 requires organizations to identify, report, and correct information system flaws; applying these vendor patches promptly is exactly the remediation activity this control mandates for critical vulnerabilities.","The XSS, SSRF, broken authorization, and RCE vulnerabilities disclosed here represent exactly the risk OWASP A06 warns about — using components with known vulnerabilities that have not been updated.","Regularly scanning for and remediating vulnerabilities in Splunk and SolarWinds products would ensure critical flaws like RCE and broken authorization are identified and patched within a defined remediation window, before exploitation.","This control requires timely identification of technical vulnerabilities and appropriate action, directly applying to the need to track and patch the disclosed flaws across Splunk and SolarWinds deployments.","The improper access control and broken authorization flaws in these products directly violate this principle, highlighting the need to ensure security tools themselves enforce strong authentication and authorization."]