Covered by 2 sources: CERT-FR, SecurityWeek.
Multiple vulnerabilities have been discovered within SolarWinds products, including flaws that could lead to privilege escalation, server-side request forgery (SSRF), and remote cross-site scripting (XSS).
Multiple vulnerabilities have been discovered in Splunk products, including Splunk Enterprise and Splunk SOAR. Splunk recommends referring to the security advisory for details and available patches.
Splunk and SolarWinds have released security updates to address a range of vulnerabilities, including remote code execution, denial-of-service, and information disclosure flaws.
Arista Networks has released patches for a critical zero-day vulnerability (CVE-2026-114625) in its VeloCloud Orchestrator (VCO) management tool. The issue has been actively exploited, and Arista urges users to update th…
