Splunk and SolarWinds this week issued security updates to address multiple vulnerabilities in their products, including code execution and privilege escalation issues.
The vulnerability or weakness
The most severe vulnerabilities, such as CVE-2026-76299 and CVE-2026-76302 in Splunk products, and CVE-2026-28328 in SolarWinds Observability, are described as critical-severity improper access control and data exposure issues.
| CVE | CVSS | Severity | In CISA KEV | KEV due date |
|---|---|---|---|---|
| CVE-2026-28328 | 8.8 | HIGH | No | - |
| CVE-2026-76299 | 9.9 | CRITICAL | No | - |
| CVE-2026-76302 | 9.9 | CRITICAL | No | - |
| CVE-2026-76407 | n/a | not scored | No | - |
| CVE-2026-76531 | 9.9 | CRITICAL | No | - |
CVE data: NVD (nvd.nist.gov) and the CISA Known Exploited Vulnerabilities catalog.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
Organizations using these products may face operational disruptions and potential data breaches, impacting their operations and reputation.
Industries affected
This update affects various industries, including IT, healthcare, and finance, where these tools are commonly used.
Users affected
Users of Splunk and SolarWinds products are advised to update their systems to prevent unauthorized access and data leaks.
Build these skills
Watch the daily brief
Sources
- Splunk, SolarWinds Release Fresh Security Updates (SecurityWeek)
