Skip to contentSplunk vulnerabilities
Newest
- splunk, splunk enterprise +1 moreStructured Query Language (SQL) Injection through the REST API in Splunk EnterpriseCVE-2026-763094.3 Medium
- splunk, splunk enterprise +1 moreImproper Access Control through the REST API in Splunk EnterpriseCVE-2026-762635.4 Medium
- splunk, splunk enterprise +1 moreExposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk EnterpriseCVE-2026-762627.5 High
- splunk, splunk enterprise, secure gateway +2 moreInsecure Default Access Control List through the REST API in Splunk Secure GatewayCVE-2026-762615.3 Medium
- splunk, splunk enterprise +1 moreIncorrect Permission Assignment for Critical Resource through the REST API in Splunk EnterpriseCVE-2026-762606.5 Medium
- splunk, splunk enterprise +1 moreImproper Privilege Management on the Management Port in Splunk Enterprise for WindowsCVE-2026-762598.8 High
- splunk, splunk enterprise, secure gateway +2 moreUse of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure GatewayCVE-2026-762586.5 Medium
- splunk, splunk enterprise, secure gateway +2 moreMissing Authorization through REST API Endpoints in Splunk Secure GatewayCVE-2026-762576.5 Medium
- splunk, splunk enterprise, secure gateway +2 moreInformation Exposure through REST API Endpoints in Splunk Secure GatewayCVE-2026-762564.3 Medium
- splunk, splunk enterprise +1 moreRisky Command Safeguards Bypass through Splunk Web in Splunk EnterpriseCVE-2026-762556.4 Medium
- splunk, splunk enterprise +1 moreSPL Command Safeguards Bypass through Splunk Web in Splunk EnterpriseCVE-2026-762547.5 High
- splunk, splunk enterprise +1 morePrivilege Escalation through Scheduled Search Alert Action Configuration in Splunk EnterpriseCVE-2026-762538.8 High
- splunk, splunk enterprise +1 moreCross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk EnterpriseCVE-2026-762526.8 Medium
- splunk, splunk enterprise +1 moreMissing Authorization through REST API Endpoints in the Splunk App for Splunk Observability CloudCVE-2026-762517.1 High
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk EnterpriseCVE-2026-202985.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreSPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk EnterpriseCVE-2026-202968.3 High
- splunk, splunk cloud platform, enterprise +2 morePath Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk EnterpriseCVE-2026-202977.2 High
- splunk ai toolkitOS Command Injection in the btool Configuration Helper in Splunk AI ToolkitCVE-2026-202669.1 Critical
- splunk ai toolkitInsecure Default Domain Allowlist in Splunk AI ToolkitCVE-2026-202654.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreStored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk EnterpriseCVE-2026-202587.1 High
- splunk enterprise, splunk +1 moreUnauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk EnterpriseCVE-2026-20253In KEVPublic exploitEPSS 96.9%9.8 Critical
- splunk soarLog Injection through HTTP Request Paths in Splunk SOARCVE-2026-202604.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreServer-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk EnterpriseCVE-2026-202527.6 High
- splunk, splunk cloud platform, enterprise +2 moreImproper Input Validation through Classic Dashboard CSS in Splunk EnterpriseCVE-2026-202575.7 Medium
- splunk, splunk cloud platform, enterprise +2 moreImproper Access Control in Splunk EnterpriseCVE-2026-202595.5 Medium
- splunk, splunk cloud platform, enterprise +2 moreImproper Input Validation through Classic Dashboards in Splunk EnterpriseCVE-2026-202555.7 Medium
- splunk, splunk cloud platform, enterprise +1 more +3 moreRemote Code Execution through Deserialization of Untrusted Data in Splunk Secure GatewayCVE-2026-20251Public exploitEPSS 30.6%8.8 High
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure through External Content Restriction Bypass in Splunk EnterpriseCVE-2026-202545.7 Medium
- splunk, splunk cloud platform, enterprise +2 moreImproper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk EnterpriseCVE-2026-202565.7 Medium
- splunk ai toolkitImproper Access Control through Role Inheritance in Splunk AI Toolkit appCVE-2026-202386.5 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure through Log Files in Splunk EnterpriseCVE-2026-202397.5 High
- splunk, splunk cloud platform, enterprise +2 moreDenial of Service through coldToFrozen.sh Script in Splunk EnterpriseCVE-2026-202407.1 High
- splunk mcp serverSensitive Information Disclosure in ''_internal'' index in Splunk MCP Server appCVE-2026-202057.2 High
- splunk, splunk cloud platform, enterprise +2 moreImproper Access Control in Data Model Acceleration in Splunk EnterpriseCVE-2026-202034.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreImproper Handling and Insufficient Isolation of Specific Temporary Files in Splunk EnterpriseCVE-2026-202047.1 High
- splunk, splunk cloud platform, enterprise +2 moreImproper Input Validation during User Account Creation in Splunk EnterpriseCVE-2026-202026.6 Medium
- splunk, splunk cloud platform, enterprise +2 moreRemote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk EnterpriseCVE-2026-201638.0 High
- splunk, splunk cloud platform, enterprise +2 moreStored Cross-Site Scripting (XSS) through Path Traversal in Splunk EnterpriseCVE-2026-201626.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk EnterpriseCVE-2026-201665.4 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure through Improper Access Control in Splunk EnterpriseCVE-2026-201646.5 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure in MongoClient logging channel in Splunk EnterpriseCVE-2026-201656.3 Medium
- splunk, splunk enterprise +1 moreSensitive Information Disclosure in "_internal" index in Splunk EnterpriseCVE-2026-201426.8 Medium
- splunk, splunk enterprise +1 moreSensitive Information Disclosure in "_internal" index in Splunk EnterpriseCVE-2026-201386.8 Medium
- splunk, splunk cloud platform, enterprise +2 moreClient-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk EnterpriseCVE-2026-201394.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure in ''_internal'' index in Splunk EnterpriseCVE-2026-201446.8 Medium
- splunk, splunk enterprise +1 moreImproper Access Control in Splunk Monitoring Console AppCVE-2026-201414.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreRisky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk EnterpriseCVE-2026-201373.5 Low
- splunk, splunk cloud platform, enterprise +2 moreBlind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk EnterpriseCVE-2025-203882.7 Low
- splunk, splunk cloud platform, enterprise +1 more +3 moreImproper Input Validation in "label" column field in Splunk Secure Gateway AppCVE-2025-203894.3 Medium
- splunk, splunk enterprise +1 moreIncorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgradeCVE-2025-203878.0 High
- Show moreLoading…