Splunk Enterprise vulnerabilities

• splunk enterprise Security Hardening in Splunk Enterprise - October 2026 CVE-2026-76302 9.9 CriticalOctober 21, 2026
• splunk enterprise Security Hardening in Splunk Enterprise - October 2026 CVE-2026-76301 9.8 CriticalOctober 21, 2026
• splunk enterprise Security Hardening in Splunk Enterprise - October 2026 CVE-2026-76300 8.8 HighOctober 21, 2026
• splunk enterprise Security Hardening in Splunk Enterprise - October 2026 CVE-2026-76299 9.9 CriticalOctober 21, 2026
• splunk, splunk enterprise +1 more Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise CVE-2026-76298 8.8 HighOctober 21, 2026
• splunk, splunk enterprise +1 more Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise CVE-2026-76297 4.2 MediumOctober 21, 2026
• splunk, splunk enterprise +1 more Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise CVE-2026-76296 4.3 MediumOctober 21, 2026
• splunk, splunk enterprise, secure gateway +2 more SPL Injection through the REST API in Splunk Secure Gateway CVE-2026-76295 4.3 MediumOctober 21, 2026
• splunk, splunk enterprise +1 more Improper Access Control in Field Extraction Management in Splunk Enterprise CVE-2026-76294 4.3 MediumOctober 21, 2026
• splunk, splunk enterprise +1 more Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise CVE-2026-76293 7.2 HighOctober 21, 2026
• splunk, splunk enterprise, secure gateway +2 more Missing Authorization through REST API Endpoints in Splunk Secure Gateway CVE-2026-76292 6.5 MediumOctober 21, 2026
• splunk, splunk enterprise +1 more Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise CVE-2026-76291 8.8 HighOctober 21, 2026
• splunk, splunk enterprise +1 more Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise CVE-2026-76290 7.5 HighOctober 21, 2026
• splunk, splunk enterprise +1 more Denial of Service (DoS) through the REST API in Splunk Enterprise CVE-2026-76289 6.5 MediumOctober 21, 2026
• splunk, splunk enterprise +1 more Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise CVE-2026-76288 7.5 HighOctober 21, 2026
• splunk, splunk enterprise +1 more Authorization Bypass in the Data Management REST API in Splunk Enterprise CVE-2026-76287 5.4 MediumOctober 21, 2026
• splunk, splunk enterprise +1 more Improper Adherence to Coding Standards in Splunk Enterprise CVE-2026-76285 9.8 CriticalOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Neutralization in Splunk Enterprise CVE-2026-76284 9.8 CriticalOctober 7, 2026
• splunk, splunk enterprise +1 more Protection Mechanism Failure in Splunk Enterprise CVE-2026-76283 7.6 HighOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Control of a Resource Through its Lifetime in Splunk Enterprise CVE-2026-76282 8.8 HighOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Access Control in Splunk Enterprise CVE-2026-76281 5.3 MediumOctober 7, 2026
• splunk, splunk enterprise, secure gateway +2 more Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway CVE-2026-76280 6.3 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Input Validation of Index Names through the collect Command in Splunk Enterprise CVE-2026-76279 4.3 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise CVE-2026-76278 4.3 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise CVE-2026-76277 4.1 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise CVE-2026-76276 4.3 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise CVE-2026-76275 4.3 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud CVE-2026-76274 6.5 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Input Validation through the collect Command in Splunk Enterprise CVE-2026-76273 4.3 MediumOctober 7, 2026
• splunk, splunk enterprise, secure gateway +2 more Missing Access Control through the REST API in Splunk Secure Gateway CVE-2026-76272 4.3 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise CVE-2026-76271 6.5 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise CVE-2026-76270 6.5 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise CVE-2026-76269 6.5 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise CVE-2026-76268 Public exploit 9.8 CriticalOctober 7, 2026
• splunk, splunk enterprise +1 more Log Injection through the REST API in Splunk App for Splunk O11y Cloud CVE-2026-76267 4.3 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise CVE-2026-76266 7.7 HighOctober 7, 2026
• splunk, splunk enterprise, secure gateway +2 more Improper Access Control through REST API Endpoints in Splunk Secure Gateway CVE-2026-76265 6.5 MediumOctober 7, 2026
• splunk, splunk enterprise +1 more Improper Authorization through the REST API in Splunk Enterprise CVE-2026-76264 4.3 MediumOctober 7, 2026
• cisco talos intelligence for enterprise security cloud, splunk cisco talos intelligence for enterprise security cloud +1 more Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud CVE-2026-76390 5.3 MediumAugust 19, 2026
• cisco talos intelligence for enterprise security cloud, splunk cisco talos intelligence for enterprise security cloud +1 more Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security Cloud CVE-2026-76389 8.8 HighAugust 19, 2026
• splunk enterprise security Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security CVE-2026-76388 8.1 HighAugust 19, 2026
• splunk enterprise security SPL Injection through the REST API in Splunk Enterprise Security CVE-2026-76387 8.1 HighAugust 19, 2026
• splunk, splunk enterprise +1 more Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise CVE-2026-76355 7.5 HighAugust 19, 2026
• splunk, splunk enterprise +1 more Path Traversal through Search Head Clustering in Splunk Enterprise CVE-2026-76354 8.1 HighAugust 19, 2026
• splunk, splunk enterprise +1 more Path Traversal through Knowledge Bundle Replication in Splunk Enterprise CVE-2026-76353 5.4 MediumAugust 19, 2026
• splunk, splunk enterprise +1 more Improper Authorization through the REST API in Splunk Enterprise CVE-2026-76352 8.8 HighAugust 19, 2026
• splunk, splunk enterprise, secure gateway +2 more Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway CVE-2026-76351 8.8 HighAugust 19, 2026
• splunk, splunk enterprise +1 more Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise CVE-2026-76350 8.8 HighAugust 19, 2026
• splunk, splunk enterprise +1 more SPL Injection through Splunk Web Form Tokens in Splunk Enterprise CVE-2026-76349 6.4 MediumAugust 19, 2026
• splunk, splunk enterprise +1 more Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise CVE-2026-76348 3.8 LowAugust 19, 2026
• Show olderLoading…