Skip to contentSplunk vulnerabilities
Newest
- splunk soarPath Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOARCVE-2026-763596.5 Medium
- splunk soarPath Traversal through App Installation Tar Extraction in Splunk SOARCVE-2026-763586.5 Medium
- splunk soarRemote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOARCVE-2026-763577.6 High
- splunk soarAuthentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOARCVE-2026-763568.1 High
- splunk, splunk enterprise +1 moreUnauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk EnterpriseCVE-2026-763557.5 High
- splunk, splunk enterprise +1 morePath Traversal through Search Head Clustering in Splunk EnterpriseCVE-2026-763548.1 High
- splunk, splunk enterprise +1 morePath Traversal through Knowledge Bundle Replication in Splunk EnterpriseCVE-2026-763535.4 Medium
- splunk, splunk enterprise +1 moreImproper Authorization through the REST API in Splunk EnterpriseCVE-2026-763528.8 High
- splunk, splunk enterprise, secure gateway +2 moreServer-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure GatewayCVE-2026-763518.8 High
- splunk, splunk enterprise +1 moreImproper Privilege Management through PDF Attachments for Email Alert Actions in Splunk EnterpriseCVE-2026-763508.8 High
- splunk, splunk enterprise +1 moreSPL Injection through Splunk Web Form Tokens in Splunk EnterpriseCVE-2026-763496.4 Medium
- splunk, splunk enterprise +1 moreMissing Authorization in Search Head Cluster Member Controls in Splunk EnterpriseCVE-2026-763483.8 Low
- splunk, splunk enterprise, secure gateway +2 moreServer-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure GatewayCVE-2026-763475.4 Medium
- splunk, splunk enterprise +1 moreStored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk EnterpriseCVE-2026-763465.4 Medium
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) through the REST API in Splunk EnterpriseCVE-2026-763456.0 Medium
- splunk, splunk enterprise +1 morePath Traversal through the Search Dispatch REST API in Splunk EnterpriseCVE-2026-763447.7 High
- splunk, splunk enterprise +1 moreStructured Query Language (SQL) Injection through the REST API in Splunk EnterpriseCVE-2026-763436.5 Medium
- splunk, splunk enterprise +1 moreRisky Commands Safeguards Bypass through Splunk Web in Splunk EnterpriseCVE-2026-763425.4 Medium
- splunk, splunk enterprise +1 moreRisky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk EnterpriseCVE-2026-763415.4 Medium
- splunk, splunk enterprise +1 moreMissing Authorization for Reloading Token-Signing Keys through the REST API in Splunk EnterpriseCVE-2026-763405.3 Medium
- splunk, splunk enterprise +1 moreSPL Injection through the geostats Command in Splunk EnterpriseCVE-2026-763395.4 Medium
- splunk, splunk enterprise +1 moreImproper Authentication through REST API Distributed Search Token Requests in Splunk EnterpriseCVE-2026-763388.1 High
- splunk, splunk enterprise +1 morePath Traversal through Splunk Web Static File Serving in Splunk EnterpriseCVE-2026-763375.3 Medium
- splunk, splunk enterprise +1 moreImproper Access Control through the REST API in Splunk EnterpriseCVE-2026-763367.1 High
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk EnterpriseCVE-2026-763358.8 High
- splunk, splunk enterprise +1 moreSPL Injection through Dashboard Studio Workflow Actions in Splunk EnterpriseCVE-2026-763346.4 Medium
- splunk, splunk enterprise +1 moreStored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk EnterpriseCVE-2026-763337.1 High
- splunk, splunk enterprise +1 moreSPL Injection through Splunk Web in Splunk EnterpriseCVE-2026-763327.1 High
- splunk, splunk enterprise +1 moreSPL Injection through the REST API in Splunk EnterpriseCVE-2026-763318.1 High
- splunk, splunk enterprise +1 moreSPL Injection through Monitoring Console Forwarder Filters in Splunk EnterpriseCVE-2026-763307.1 High
- splunk, splunk enterprise +1 moreSPL Injection through Monitoring Console Dashboard Inputs in Splunk EnterpriseCVE-2026-763296.4 Medium
- splunk, splunk enterprise +1 moreSPL Injection through Splunk Web in Splunk EnterpriseCVE-2026-763286.7 Medium
- splunk, splunk enterprise, secure gateway +2 moreSPL Injection through Splunk Web in Splunk Secure GatewayCVE-2026-763276.4 Medium
- splunk, splunk enterprise +1 moreStored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk EnterpriseCVE-2026-763265.7 Medium
- splunk, splunk enterprise +1 moreStored Cross-Site Scripting (XSS) through Splunk Web in Splunk EnterpriseCVE-2026-763257.3 High
- splunk, splunk enterprise +1 moreStored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk EnterpriseCVE-2026-763245.7 Medium
- splunk, splunk enterprise +1 moreSPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk EnterpriseCVE-2026-763236.4 Medium
- splunk, splunk enterprise +1 moreSPL Injection through Dashboard Studio Search Query Options in Splunk EnterpriseCVE-2026-763226.7 Medium
- splunk, splunk enterprise +1 moreSPL Injection through Nearby Event Searches in Splunk EnterpriseCVE-2026-763217.3 High
- splunk, splunk enterprise +1 moreSPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk EnterpriseCVE-2026-763205.9 Medium
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) through Federated Search in Splunk EnterpriseCVE-2026-763198.8 High
- splunk, splunk enterprise +1 moreStored Cross-Site Scripting (XSS) through Splunk Web in Splunk EnterpriseCVE-2026-763185.7 Medium
- splunk, splunk enterprise +1 morePath Traversal through the Lookup Configuration REST API in Splunk EnterpriseCVE-2026-763178.8 High
- splunk, splunk enterprise +1 moreStored SPL Injection through Deployment Server Broker Registration in Splunk EnterpriseCVE-2026-763168.8 High
- splunk, splunk enterprise +1 moreCode Injection through Splunk Web Manager Configuration in Splunk EnterpriseCVE-2026-763158.8 High
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk EnterpriseCVE-2026-763148.8 High
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) through the REST API in Splunk EnterpriseCVE-2026-763138.8 High
- splunk, splunk enterprise +1 moreImproper Access Control through Embedded Reports in Splunk EnterpriseCVE-2026-763129.4 Critical
- splunk, splunk enterprise +1 moreImproper Access Control in Embedded Report Dispatch Archives in Splunk EnterpriseCVE-2026-763119.4 Critical
- splunk, splunk enterprise +1 moreImproper Access Control through Embedded Report REST API Requests in Splunk EnterpriseCVE-2026-763109.4 Critical
- Show moreLoading…