Splunk vulnerabilities
347 CVEs and advisories name Splunk as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-76531Files or Directories Accessible to External Parties in Splunk SOAR
- CVE-2026-76530Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR
- CVE-2026-76529Improper Protection of Alternate Path in Splunk SOAR
- CVE-2026-76528Protection Mechanism Failure in Splunk SOAR
- CVE-2026-76527Improper Check or Handling of Exceptional Conditions in Splunk SOAR
- CVE-2026-76526Improper Neutralization in Splunk SOAR
- CVE-2026-76408Improper Control of a Resource Through its Lifetime in Splunk SOAR
- CVE-2026-76407Improper Access Control in Splunk SOAR
- CVE-2026-76406Information Disclosure through REST API Authentication in Splunk SOAR
- CVE-2026-76308Missing Authorization through the REST API in Splunk SOAR
- CVE-2026-76307Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR
- CVE-2026-76306Information Disclosure through REST API Query Filters in Splunk SOAR
- CVE-2026-76305Improper Access Control during App Downloads in Splunk SOAR
- CVE-2026-76304Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR
- CVE-2026-76303Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR
- CVE-2026-76302Security Hardening in Splunk Enterprise - October 2026
- CVE-2026-76301Security Hardening in Splunk Enterprise - October 2026
- CVE-2026-76300Security Hardening in Splunk Enterprise - October 2026
- CVE-2026-76299Security Hardening in Splunk Enterprise - October 2026
- CVE-2026-76298Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise
- CVE-2026-76297Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise
- CVE-2026-76296Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise
- CVE-2026-76295SPL Injection through the REST API in Splunk Secure Gateway
- CVE-2026-76294Improper Access Control in Field Extraction Management in Splunk Enterprise
- CVE-2026-76293Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise
- CVE-2026-76292Missing Authorization through REST API Endpoints in Splunk Secure Gateway
- CVE-2026-76291Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise
- CVE-2026-76290Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise
- CVE-2026-76289Denial of Service (DoS) through the REST API in Splunk Enterprise
- CVE-2026-76288Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise