Skip to contentSplunk vulnerabilities
Newest
- splunk, splunk enterprise +1 moreLog Injection through the REST API in Splunk App for Splunk O11y CloudCVE-2026-762674.3 Medium
- splunk, splunk enterprise +1 moreLocal Privilege Escalation through Linux Package Upgrades in Splunk EnterpriseCVE-2026-762667.7 High
- splunk, splunk enterprise, secure gateway +2 moreImproper Access Control through REST API Endpoints in Splunk Secure GatewayCVE-2026-762656.5 Medium
- splunk, splunk enterprise +1 moreImproper Authorization through the REST API in Splunk EnterpriseCVE-2026-762644.3 Medium
- splunk on-call, on-call (victorops) +1 moreInformation Disclosure through Cleartext Storage in the App Key Value Store in the Splunk On-Call (VictorOps) appCVE-2026-764054.3 Medium
- splunk mcp server app, model context protocol server +1 moreRemote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server appCVE-2026-764049.1 Critical
- splunk connect for kafkaImproper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for KafkaCVE-2026-764037.4 High
- splunk connect for kafkaServer-Side Request Forgery (SSRF) through the REST API in Splunk Connect for KafkaCVE-2026-764028.2 High
- splunk connect for kafkaRegular Expression Denial of Service (DoS) through the REST API in Splunk Connect for KafkaCVE-2026-764015.9 Medium
- splunk connect for kafkaDenial of Service (DoS) through the REST API in Splunk Connect for KafkaCVE-2026-764005.9 Medium
- splunk ai toolkitIncorrect Permission Assignment for Scheduled Searches in Splunk AI ToolkitCVE-2026-763998.1 High
- splunk ai toolkitImproper Access Control during Experiment History Deletion through the REST API in Splunk AI ToolkitCVE-2026-763984.3 Medium
- splunk ai toolkitImproper Access Control in Experiment History through the REST API in Splunk AI ToolkitCVE-2026-763978.1 High
- splunk ai toolkitImproper Access Control through Scheduled Searches in Splunk AI ToolkitCVE-2026-763967.5 High
- splunk ai toolkitRemote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI ToolkitCVE-2026-763958.8 High
- splunk ai toolkitMissing Authorization in Container and Connection Management through the REST API in Splunk AI ToolkitCVE-2026-763948.3 High
- splunk ai toolkitRace Condition during Model Upload through the REST API in Splunk AI ToolkitCVE-2026-763935.9 Medium
- splunk ai toolkitUse of Hard-coded Credentials in Container Connections in Splunk AI ToolkitCVE-2026-763925.4 Medium
- splunk ai toolkitImproper Privilege Management through Agent Run History in Splunk AI ToolkitCVE-2026-763918.3 High
- cisco talos intelligence for enterprise security cloud, splunk cisco talos intelligence for enterprise security cloud +1 moreInformation Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security CloudCVE-2026-763905.3 Medium
- cisco talos intelligence for enterprise security cloud, splunk cisco talos intelligence for enterprise security cloud +1 moreServer-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security CloudCVE-2026-763898.8 High
- splunk enterprise securityPrivilege Escalation through Search Macro Permissions in Splunk Enterprise SecurityCVE-2026-763888.1 High
- splunk enterprise securitySPL Injection through the REST API in Splunk Enterprise SecurityCVE-2026-763878.1 High
- splunk zoom app for splunk soarInformation Disclosure through Action Parameters in Zoom app for Splunk SOARCVE-2026-763864.3 Medium
- splunk venafi app for splunk soarInformation Disclosure through Action Parameters in Venafi app for Splunk SOARCVE-2026-763854.3 Medium
- splunk attack analyzer connector for splunk soarInformation Disclosure through Action Parameters in Splunk Attack Analyzer Connector for Splunk SOARCVE-2026-763844.3 Medium
- splunk rsa securid authentication manager app for splunk soarInformation Disclosure through Action Parameters in RSA SecurID Authentication Manager app for Splunk SOARCVE-2026-763834.3 Medium
- splunk phantom app for splunk soarInformation Disclosure through Action Parameters in Phantom app for Splunk SOARCVE-2026-763824.3 Medium
- splunk ms graph for active directory app for splunk soarInformation Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOARCVE-2026-763814.3 Medium
- splunk crowdstrike oauth api app for splunk soarInformation Disclosure through Action Parameters in CrowdStrike OAuth API app for Splunk SOARCVE-2026-763804.3 Medium
- splunk cisco webex app for splunk soarInformation Disclosure through Action Parameters in Cisco Webex app for Splunk SOARCVE-2026-763794.3 Medium
- splunk cisco secure malware analytics app for splunk soarInformation Disclosure through Action Parameters in Cisco Secure Malware Analytics app for Splunk SOARCVE-2026-763784.3 Medium
- splunk azure ad graph app for splunk soarInformation Disclosure through Action Parameters in Azure AD Graph app for Splunk SOARCVE-2026-763774.3 Medium
- splunk aws iam app for splunk soarInformation Disclosure through Action Parameters in AWS IAM app for Splunk SOARCVE-2026-763764.3 Medium
- splunk ad ldap app for splunk soarInformation Disclosure through Environment Data Logging in AD LDAP app for Splunk SOARCVE-2026-763755.0 Medium
- splunk ad ldap app for splunk soarInformation Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOARCVE-2026-763744.3 Medium
- splunk ad ldap app for splunk soarFilter Injection through Action Parameters in AD LDAP app for Splunk SOARCVE-2026-763735.4 Medium
- splunk nmap scannerIncorrect Permission Assignment through Safe Mode in Nmap Scanner for Splunk SOARCVE-2026-763726.6 Medium
- splunk fireampIncorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOARCVE-2026-763712.7 Low
- splunk soarInformation Disclosure through the REST API in Splunk SOARCVE-2026-763704.3 Medium
- splunk soarPath Traversal through Automation Broker in Splunk SOARCVE-2026-763692.7 Low
- splunk soarMissing Authorization through Playbooks in Splunk SOARCVE-2026-763682.7 Low
- splunk soarStored Cross-Site Scripting (XSS) through Notes in Splunk SOARCVE-2026-763674.0 Medium
- splunk soarInformation Disclosure through the REST API in Splunk SOARCVE-2026-763666.5 Medium
- splunk soarStructured Query Language (SQL) Injection through Custom Lists in Splunk SOARCVE-2026-763656.5 Medium
- splunk soarStructured Query Language (SQL) Injection through Custom Function Results in Splunk SOARCVE-2026-763646.5 Medium
- splunk soarStructured Query Language Injection through the REST API in Splunk SOARCVE-2026-763636.5 Medium
- splunk soarImproper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOARCVE-2026-763627.4 High
- splunk soarServer-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOARCVE-2026-763612.7 Low
- splunk soarInformation Disclosure through Missing Authorization in the Health REST API in Splunk SOARCVE-2026-763604.3 Medium
- Show moreLoading…