Splunk, SolarWinds Release Fresh Security Updates

Both Splunk and SolarWinds have released security updates addressing a range of critical and high-severity vulnerabilities, including remote code execution, improper access control, broken authorization, cross-site scripting (XSS), and server-side request forgery (SSRF). These products are widely deployed in enterprise security and IT operations environments, making them high-value targets for attackers seeking to pivot across networks or exfiltrate sensitive data. The presence of remote code execution and broken authorization vulnerabilities in security tooling is particularly dangerous, as compromise of these systems can blind defenders and grant attackers administrative control. Delays in applying vendor-issued patches leave organizations exposed during the window between public disclosure and remediation, a gap that threat actors actively exploit.