Splunk vulnerabilities

Products

• Splunk 298
• Enterprise 259
• Cloud Platform 111
• Cloud Platform 89
• Universal Forwarder 62
• Soar 31
• Secure Gateway 20
• Secure Gateway 18
• Soar 17
• Ai Toolkit 12
• Ai Toolkit 12
• Cloud 11
• Cloud 10
• Enterprise 10
• Enterprise Security 5
• Enterprise Cloud 5
• Connect For Kafka 4
• Connect For Kafka 4
• Add-on Builder 3
• Ad Ldap App For Splunk Soar 3
• Add-on Builder 3
• App For Lookup File Editing 3
• App For Lookup File Editing 3
• Mcp Server 3
• Universal Forwarder 3
• Cisco Talos Intelligence For Enterprise Security Cloud 2
• Enterprise Security 2
• Enterprise Security (es) 2

Newest

• splunk soar Files or Directories Accessible to External Parties in Splunk SOAR CVE-2026-76531 9.9 CriticalOctober 21, 2026
• splunk soar Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR CVE-2026-76530 8.8 HighOctober 21, 2026
• splunk soar Improper Protection of Alternate Path in Splunk SOAR CVE-2026-76529 9.8 CriticalOctober 21, 2026
• splunk soar Protection Mechanism Failure in Splunk SOAR CVE-2026-76528 9.8 CriticalOctober 21, 2026
• splunk soar Improper Check or Handling of Exceptional Conditions in Splunk SOAR CVE-2026-76527 9.8 CriticalOctober 21, 2026
• splunk soar Improper Neutralization in Splunk SOAR CVE-2026-76526 8.8 HighOctober 21, 2026
• splunk soar Improper Control of a Resource Through its Lifetime in Splunk SOAR CVE-2026-76408 9.8 CriticalOctober 21, 2026
• splunk soar Improper Access Control in Splunk SOAR CVE-2026-76407 9.8 CriticalOctober 21, 2026
• splunk soar Information Disclosure through REST API Authentication in Splunk SOAR CVE-2026-76406 5.9 MediumOctober 21, 2026
• splunk soar Missing Authorization through the REST API in Splunk SOAR CVE-2026-76308 6.5 MediumOctober 21, 2026
• splunk soar Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR CVE-2026-76307 7.2 HighOctober 21, 2026
• splunk soar Information Disclosure through REST API Query Filters in Splunk SOAR CVE-2026-76306 7.5 HighOctober 21, 2026
• splunk soar Improper Access Control during App Downloads in Splunk SOAR CVE-2026-76305 6.5 MediumOctober 21, 2026
• splunk soar Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR CVE-2026-76304 4.3 MediumOctober 21, 2026
• splunk soar Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR CVE-2026-76303 5.7 MediumOctober 21, 2026
• splunk enterprise Security Hardening in Splunk Enterprise - October 2026 CVE-2026-76302 9.9 CriticalOctober 21, 2026
• splunk enterprise Security Hardening in Splunk Enterprise - October 2026 CVE-2026-76301 9.8 CriticalOctober 21, 2026
• splunk enterprise Security Hardening in Splunk Enterprise - October 2026 CVE-2026-76300 8.8 HighOctober 21, 2026
• splunk enterprise Security Hardening in Splunk Enterprise - October 2026 CVE-2026-76299 9.9 CriticalOctober 21, 2026
• splunk, splunk enterprise +1 more Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise CVE-2026-76298 8.8 HighOctober 21, 2026
• splunk, splunk enterprise +1 more Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise CVE-2026-76297 4.2 MediumOctober 21, 2026
• splunk, splunk enterprise +1 more Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise CVE-2026-76296 4.3 MediumOctober 21, 2026
• splunk, splunk enterprise, secure gateway +2 more SPL Injection through the REST API in Splunk Secure Gateway CVE-2026-76295 4.3 MediumOctober 21, 2026
• splunk, splunk enterprise +1 more Improper Access Control in Field Extraction Management in Splunk Enterprise CVE-2026-76294 4.3 MediumOctober 21, 2026
• splunk, splunk enterprise +1 more Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise CVE-2026-76293 7.2 HighOctober 21, 2026
• splunk, splunk enterprise, secure gateway +2 more Missing Authorization through REST API Endpoints in Splunk Secure Gateway CVE-2026-76292 6.5 MediumOctober 21, 2026
• splunk, splunk enterprise +1 more Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise CVE-2026-76291 8.8 HighOctober 21, 2026
• splunk, splunk enterprise +1 more Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise CVE-2026-76290 7.5 HighOctober 21, 2026
• splunk, splunk enterprise +1 more Denial of Service (DoS) through the REST API in Splunk Enterprise CVE-2026-76289 6.5 MediumOctober 21, 2026
• splunk, splunk enterprise +1 more Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise CVE-2026-76288 7.5 HighOctober 21, 2026
• splunk, splunk enterprise +1 more Authorization Bypass in the Data Management REST API in Splunk Enterprise CVE-2026-76287 5.4 MediumOctober 21, 2026
• splunk mcp server Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server CVE-2026-76286 5.3 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Adherence to Coding Standards in Splunk Enterprise CVE-2026-76285 9.8 CriticalOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Neutralization in Splunk Enterprise CVE-2026-76284 9.8 CriticalOctober 7, 2026
• splunk, splunk enterprise +1 more Protection Mechanism Failure in Splunk Enterprise CVE-2026-76283 7.6 HighOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Control of a Resource Through its Lifetime in Splunk Enterprise CVE-2026-76282 8.8 HighOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Access Control in Splunk Enterprise CVE-2026-76281 5.3 MediumOctober 7, 2026
• splunk, splunk enterprise, secure gateway +2 more Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway CVE-2026-76280 6.3 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Input Validation of Index Names through the collect Command in Splunk Enterprise CVE-2026-76279 4.3 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise CVE-2026-76278 4.3 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise CVE-2026-76277 4.1 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise CVE-2026-76276 4.3 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise CVE-2026-76275 4.3 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud CVE-2026-76274 6.5 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Input Validation through the collect Command in Splunk Enterprise CVE-2026-76273 4.3 MediumOctober 7, 2026
• splunk, splunk enterprise, secure gateway +2 more Missing Access Control through the REST API in Splunk Secure Gateway CVE-2026-76272 4.3 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise CVE-2026-76271 6.5 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise CVE-2026-76270 6.5 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise CVE-2026-76269 6.5 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise CVE-2026-76268 Public exploit 9.8 CriticalOctober 7, 2026
• Show olderLoading…