Zaifliklar
Splunk va SolarWinds yangi xavfsizlik yangilanishlarini e'lon qildi
Tuzatilgan zaifliklar hujumchilarga kodni bajarish, imtiyozlarni oshirish va maxfiy ma'lumotlarni oshkor qilish imkonini berishi mumkin edi.
Muallif
Ionut Arghire
| 2026-yil 22-oktabr (ET 6:45)
Splunk va SolarWinds bu hafta bir nechta zaifliklar, jumladan kodni bajarish, imtiyozlarni oshirish, xizmatdan foydalanishni rad etish (DoS) va ma'lumotlarni oshkor qilishga olib keladigan kamchiliklar uchun tuzatishlar e'lon qildi.
Chorshanba kuni Splunk Splunk Enterprise va SOAR uchun xavfsizlik yangilanishlarini e'lon qildi va o'nlab xavfsizlik kamchiliklarini, jumladan uchinchi tomon paketlaridagi bir nechta kamchiliklarni bartaraf etdi.
Splunk Enterprise 9.4.16, 10.0.11, 10.2.8 va 10.4.4 versiyalari mahsulot kodidagi 16 ta CVE ni tuzatish bilan chiqarildi, jumladan CVE-2026-76299 va CVE-2026-76302 — tanqidiy darajadagi noto'g'ri kirish nazorati va noto'g'ri neytrallash muammolari.
Yuqori darajadagi masofadan kod bajarish (RCE), DoS, avtorizatsiyani chetlab o'tish va noto'g'ri resurs nazorati zaifliklari ham bartaraf etildi.
Splunk SOAR 8.7.0 versiyasi o'z kodidagi 15 ta zaiflik va uchinchi tomon kutubxonalaridagi o'nlab kamchiliklar uchun tuzatishlar bilan chiqarildi. Eng jiddiylari CVE-2026-76531 va CVE-2026-76407 — tanqidiy darajadagi ma'lumotlar oshkor bo'lishi va noto'g'ri kirish nazorati muammolari.
Yangilanish shuningdek yuqori darajadagi ma'lumotlar oshkor bo'lishi, noto'g'ri neytrallash, noto'g'ri resurs nazorati va himoya kamchiliklarini ham bartaraf etadi.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
SolarWinds Observability'dagi yuqori darajadagi xatolikni tuzatdi, bu past imtiyozli foydalanuvchilarga cheklangan ma'lumotlarga kirish imkonini berishi mumkin edi. CVE-2026-28328 sifatida kuzatilgan bu kamchilik buzilgan avtorizatsiya sxemasi muammosi sifatida tasvirlangan.
Bundan tashqari, kompaniya Observability'dagi o'rta darajadagi XSS va SSRF zaifliklarini va Patch Manager'dagi o'rta darajadagi ma'lumotlar oshkor bo'lishi xatoligini bartaraf etadigan xavfsizlik yangilanishlarini e'lon qildi.
Observability Self-Hosted 2026.4 va Patch Manager 2026.4 versiyalari ushbu xavfsizlik kamchiliklari uchun tuzatishlarni o'z ichiga oladi.
Bog'liq: Cisco bir nechta mahsulotlar bo'yicha 34 ta zaiflikni tuzatdi
Bog'liq: PHP2Shell ekspluatatsiyasi tuzatishlardan bir necha kun oldin boshlandi
Bog'liq: Oracle 2026-yil oktyabr CPU bilan 1200 dan ortiq zaiflikni tuzatdi
Bog'liq: Drupal tanqidiy yadro RCE kamchiligi uchun tez ekspluatatsiya xavfi haqida ogohlantirdi
Yozgan: Ionut Arghire
Ionut Arghire SecurityWeek uchun xalqaro muxbir.
Kundalik axborot byulleteni
So'nggi kiberxavfsizlik tahdidlari, tendentsiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta axborotiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Ionut Arghiredan ko'proq
- Signal zaifligi zararli qo'ng'iroq qiluvchilarga qo'ng'iroqni to'xtatishni bloklash imkonini beradi
- Cisco bir nechta mahsulotlar bo'yicha 34 ta zaiflikni tuzatdi
- PHP2Shell ekspluatatsiyasi tuzatishlardan bir necha kun oldin boshlandi
- PHP2Shell tuzatishlari birinchi ekspluatatsiya urinishlari sensorlarga yetib kelganida e'lon qilindi
- Chrome'ning 353 ta yangi xavfsizlik tuzatishlarining aksariyati xotira xatoliklari
- Brauzerlar eMudhra oraliq CA larini tiklanadigan shaxsiy kalitlar tufayli blokladi
- Xitoy AI modeli AQSh pudratchisi uchun yozilganda ko'proq buziladigan kod yozadi
- PHP2Shell: Oqib ketgan tanqidiy PHP kamchiliklari uchun ommaviy ekspluatatsiya yaqinlashmoqda
So'nggi yangiliklar
- Sobiq 8200-bo'lim ofitserlari Agentic SecOps startapi Mave uchun 34 million dollar yig'di
- Boshqa yangiliklarda: Tor chiqish releylari o'g'irlandi, banklar yovuz AI agentlarini aniqladi, o'zini tiklaydigan macOS ransomware
- Mirai botnet operatorlari PHP2Shell hujumlariga qo'shildi, ASLR chetlab o'tish ekspluatatsiyalari paydo bo'ldi
- Xitoy APT ConnectWise hujumlarida AI pentest vositasi Artex'dan foydalanadi
- Hujumchilar to'rt oy ichida uchinchi Arista VCO nol kunini ekspluatatsiya qiladi
- Capcom ma'lumotlar buzilishi 11 million kishiga ta'sir qildi
- Quest Diagnostics ma'lumotlar buzilishi "ma'lum bemor yozuvlari"ni oshkor qildi
- LiteLLM yangi ta'minot zanjiri hujumida buzildi
Trend
Texnologiya va xavfsizlik kompaniyalari PHP2Shell zaifliklariga javob qaytarmoqda
Xitoy APT ConnectWise hujumlarida AI pentest vositasi Artex'dan foydalanadi
Mirai botnet operatorlari PHP2Shell hujumlariga qo'shildi, ASLR chetlab o'tish ekspluatatsiyalari paydo bo'ldi
Boshqa yangiliklarda: Tor chiqish releylari o'g'irlandi, banklar yovuz AI agentlarini aniqladi, o'zini tiklaydigan macOS ransomware
PHP2Shell tuzatishlari birinchi ekspluatatsiya urinishlari sensorlarga yetib kelganida e'lon qilindi
PHP2Shell: Oqib ketgan tanqidiy PHP kamchiliklari uchun ommaviy ekspluatatsiya yaqinlashmoqda
Quest Diagnostics ma'lumotlar buzilishi "ma'lum bemor yozuvlari"ni oshkor qildi
Signal zaifligi zararli qo'ng'iroq qiluvchilarga qo'ng'iroqni to'xtatishni bloklash imkonini beradi
Kundalik axborot byulleteni
So'nggi tahdidlar, tendentsiyalar va texnologiyalar, shuningdek, soha mutaxassislarining chuqur fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta axborotiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Vebinar: Google Workspace'dagi AI kirish xavfi allaqachon mavjud
2026-yil 19-oktabr
Google Workspace'ga ulangan AI vositalari millionlab maxfiy elektron pochta va fayllarga kirishi mumkin. Tashkilotingizning xavfini aniqlash va AI kirishini boshqarish uchun ramkani o'rganish uchun ushbu sessiyaga qo'shiling.
Ro'yxatdan o'ting
Virtual tadbir: CISO Forum 2026 Summit
2026-yil 10 va 11-noyabr
CISO lar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik yetakchilarini amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantiradigan masalalarni ko'rib chiqish uchun birlashtiradigan ushbu tadbirga qo'shiling.
Ro'yxatdan o'ting
Harakatdagi odamlar
Cequence Security Russ Schaferni CMO etib tayinladi.
Mona Harrington DHS'da Kiber integratsiya bo'yicha yordamchi direktor etib tayinlandi.
iCOUNTER Mark H. FitzPatrickni CFO etib tayinladi.
Harakatdagi ko'proq odamlar
Mutaxassis fikrlari
AI dasturiy ta'minot xavfsizligining kaliti tezlik emas, balki yetuklikdir
Sizning dasturchilaringiz AI qabul qilish shkalasida qayerda turishi xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir qiladi. (Matias Madou)
Zamonaviy kiberhujumlarga qarshi kurashda kontekst qirol
Kontekstual himoya xavfsizlik jamoalariga signallarni bog'lash, keyingi qadamni oldindan ko'rish va tahdidlar kuchayishidan oldin ularni to'xtatishga yordam beradi. (Etay Maor)
AI hujum tezligini o'zgartirdi, xavfsizlik asoslarini emas
AI zaifliklarni aniqlash va ekspluatatsiyani tezlashtirgan sari, virtual tuzatish hali ham chuqur himoya va kuchli ilova xavfsizligi asoslariga bog'liq. (Joshua Goldfarb)
Kelajak uchun katta rejalar tuzayotgan to'rtta kiber tahdid
- AI, ta'minot zanjiri ta'siri, kvant hisoblash va geosiyosiy ziddiyat xavfsizlik dasturlarini sinovdan o'tkazmoqda. Buzilishlarga tayyorgarlik kundalik operatsiyalarning bir qismiga aylanishi kerak. (Steve Durbin)
Oxiridan boshlang: Agentik tuzatishni qanday yoqish mumkin
Agentik tuzatish ishonch harakati emas. Biz ma'lum muammolarni tuzatish haqida gapiryapmiz, notanish xavf haqida hukm chiqarish emas. (Nadir Izrael)
Vulnerabilities
Splunk, SolarWinds Release Fresh Security Updates
Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.
By
Ionut Arghire
| October 22, 2026 (6:45 AM ET)
*
Splunk and SolarWinds this week released patches for multiple vulnerabilities, including flaws leading to code execution, privilege escalation, denial-of-service (DoS), and information disclosure.
On Wednesday, Splunk rolled out security updates for Splunk Enterprise and SOAR to resolve dozens of security defects, including multiple flaws in third-party packages.
Splunk Enterprise versions 9.4.16, 10.0.11, 10.2.8, and 10.4.4 were rolled out with fixes for 16 CVEs in the product’s code, including CVE-2026-76299 and CVE-2026-76302, critical-severity improper access control and improper neutralization issues.
High-severity remote code execution (RCE), DoS, authorization bypasses, and improper resource control weaknesses were also addressed.
Splunk SOAR version 8.7.0 was released with patches for 15 vulnerabilities in its code and over a dozen in third-party libraries. The most severe are CVE-2026-76531 and CVE-2026-76407, critical-severity data exposure and improper access control issues.
The update also resolves high-severity information disclosure, improper neutralization, improper resource control, and protection defects.
Advertisement. Scroll to continue reading.
SolarWinds released fixes for a high-severity bug in Observability that could allow low-privileged users to access restricted information. Tracked as CVE-2026-28328, the flaw is described as a broken authorization schema issue.
Additionally, the company released security updates that address medium-severity XSS and SSRF vulnerabilities in Observability, and a medium-severity information disclosure bug in Patch Manager.
Observability Self-Hosted version 2026.4 and Patch Manager version 2026.4 contain patches for these security defects.
Related:Cisco Patches 34 Vulnerabilities Across Multiple Products
Related:PHP2Shell Exploitation Started Days Before Patches
Related:Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU
Related:Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw
Written ByIonut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Ionut Arghire
- Signal Vulnerability Lets Malicious Callers Block Hang-Ups
- Cisco Patches 34 Vulnerabilities Across Multiple Products
- PHP2Shell Exploitation Started Days Before Patches
- PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
- Memory Bugs Account for Most of Chrome’s 353 New Security Fixes
- Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
- Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor
- PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
Latest News
- Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
- In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
- Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
- China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
- Attackers Exploit Third Arista VCO Zero-Day in Four Months
- 11 Million Impacted by Capcom Data Breach
- Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
- LiteLLM Compromised in Fresh Supply Chain Attack
Trending
Tech and Security Companies Respond to PHP2Shell Vulnerabilities
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
Signal Vulnerability Lets Malicious Callers Block Hang-Ups
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: The AI Access Risk Already in Your Google Workspace
October 19, 2026
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Cequence Security has appointed Russ Schafer as CMO.
Mona Harrington has been named Assistant Director for Cyber Integration at DHS.
iCOUNTER has appointed Mark H. FitzPatrick as CFO.
More People On The Move
Expert Insights
*
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)
Four Cyber Threats Harboring Big Plans for the Future
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.(Steve Durbin)
Begin at the End: How to Enable Agentic Remediation
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.(Nadir Izrael)