Splunk, Palo Alto Networks Patch Severe Vulnerabilities
Splunk and Palo Alto Networks patch critical and high-severity vulnerabilities.
Splunk and Palo Alto Networks have released patches for numerous vulnerabilities across their product lines. Palo Alto Networks addressed a critical flaw in Cortex XSOAR and XSIAM, while Splunk fixed a critical arbitrary file creation bug in Splunk Enterprise. Both companies also patched several medium and low-severity issues, with no reports of active exploitation in the wild.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Palo Alto Networks?
Get an email when a new story names Palo Alto Networks, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonMultiple critical vulnerabilities were discovered in enterprise security platforms from Splunk and Palo Alto Networks, including an arbitrary file creation bug in Splunk Enterprise and a critical flaw in Cortex XSOAR/XSIAM. While no active exploitation has been reported, these vulnerabilities affect core security infrastructure that organizations rely on for monitoring and threat response. The simultaneous release of patches across multiple enterprise security vendors highlights the importance of maintaining current vulnerability management processes for security tools themselves.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-0274
- cve — CVE-2026-20253