CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- splunk ad ldap app for splunk soarInformation Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR5.0 Medium
- splunk ad ldap app for splunk soarInformation Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR4.3 Medium
- splunk ad ldap app for splunk soarFilter Injection through Action Parameters in AD LDAP app for Splunk SOAR5.4 Medium
- splunk nmap scannerIncorrect Permission Assignment through Safe Mode in Nmap Scanner for Splunk SOAR6.6 Medium
- splunk fireampIncorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOAR2.7 Low
- splunk soarInformation Disclosure through the REST API in Splunk SOAR4.3 Medium
- splunk soarPath Traversal through Automation Broker in Splunk SOAR2.7 Low
- splunk soarMissing Authorization through Playbooks in Splunk SOAR2.7 Low
- splunk soarStored Cross-Site Scripting (XSS) through Notes in Splunk SOAR4.0 Medium
- splunk soarInformation Disclosure through the REST API in Splunk SOAR6.5 Medium
- splunk soarStructured Query Language (SQL) Injection through Custom Lists in Splunk SOAR6.5 Medium
- splunk soarStructured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR6.5 Medium
- splunk soarStructured Query Language Injection through the REST API in Splunk SOAR6.5 Medium
- splunk soarImproper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR7.4 High
- splunk soarServer-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR2.7 Low
- splunk soarInformation Disclosure through Missing Authorization in the Health REST API in Splunk SOAR4.3 Medium
- splunk soarPath Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR6.5 Medium
- splunk soarPath Traversal through App Installation Tar Extraction in Splunk SOAR6.5 Medium
- splunk soarRemote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR7.6 High
- splunk soarAuthentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR8.1 High
- splunk, splunk enterprise +1 moreUnauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise7.5 High
- splunk, splunk enterprise +1 morePath Traversal through Search Head Clustering in Splunk Enterprise8.1 High
- splunk, splunk enterprise +1 morePath Traversal through Knowledge Bundle Replication in Splunk Enterprise5.4 Medium
- splunk, splunk enterprise +1 moreImproper Authorization through the REST API in Splunk Enterprise8.8 High
- splunk, splunk enterprise, secure gateway +2 moreServer-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway8.8 High
- splunk, splunk enterprise +1 moreImproper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise8.8 High
- splunk, splunk enterprise +1 moreSPL Injection through Splunk Web Form Tokens in Splunk Enterprise6.4 Medium
- splunk, splunk enterprise +1 moreMissing Authorization in Search Head Cluster Member Controls in Splunk Enterprise3.8 Low
- splunk, splunk enterprise, secure gateway +2 moreServer-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway5.4 Medium
- splunk, splunk enterprise +1 moreStored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise5.4 Medium
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) through the REST API in Splunk Enterprise6.0 Medium
- splunk, splunk enterprise +1 morePath Traversal through the Search Dispatch REST API in Splunk Enterprise7.7 High
- splunk, splunk enterprise +1 moreStructured Query Language (SQL) Injection through the REST API in Splunk Enterprise6.5 Medium
- splunk, splunk enterprise +1 moreRisky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise5.4 Medium
- splunk, splunk enterprise +1 moreRisky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise5.4 Medium
- splunk, splunk enterprise +1 moreMissing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise5.3 Medium
- splunk, splunk enterprise +1 moreSPL Injection through the geostats Command in Splunk Enterprise5.4 Medium
- splunk, splunk enterprise +1 moreImproper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise8.1 High
- splunk, splunk enterprise +1 morePath Traversal through Splunk Web Static File Serving in Splunk Enterprise5.3 Medium
- splunk, splunk enterprise +1 moreImproper Access Control through the REST API in Splunk Enterprise7.1 High
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise8.8 High
- splunk, splunk enterprise +1 moreSPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise6.4 Medium
- splunk, splunk enterprise +1 moreStored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise7.1 High
- splunk, splunk enterprise +1 moreSPL Injection through Splunk Web in Splunk Enterprise7.1 High
- splunk, splunk enterprise +1 moreSPL Injection through the REST API in Splunk Enterprise8.1 High
- splunk, splunk enterprise +1 moreSPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise7.1 High
- splunk, splunk enterprise +1 moreSPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise6.4 Medium
- splunk, splunk enterprise +1 moreSPL Injection through Splunk Web in Splunk Enterprise6.7 Medium
- splunk, splunk enterprise, secure gateway +2 moreSPL Injection through Splunk Web in Splunk Secure Gateway6.4 Medium
- splunk, splunk enterprise +1 moreStored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise5.7 Medium
- Show moreLoading…