Splunk vulnerabilities
347 CVEs and advisories name Splunk as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-76287Authorization Bypass in the Data Management REST API in Splunk Enterprise
- CVE-2026-76286Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server
- CVE-2026-76285Improper Adherence to Coding Standards in Splunk Enterprise
- CVE-2026-76284Improper Neutralization in Splunk Enterprise
- CVE-2026-76283Protection Mechanism Failure in Splunk Enterprise
- CVE-2026-76282Improper Control of a Resource Through its Lifetime in Splunk Enterprise
- CVE-2026-76281Improper Access Control in Splunk Enterprise
- CVE-2026-76280Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway
- CVE-2026-76279Improper Input Validation of Index Names through the collect Command in Splunk Enterprise
- CVE-2026-76278Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise
- CVE-2026-76277Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise
- CVE-2026-76276Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise
- CVE-2026-76275Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise
- CVE-2026-76274Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud
- CVE-2026-76273Improper Input Validation through the collect Command in Splunk Enterprise
- CVE-2026-76272Missing Access Control through the REST API in Splunk Secure Gateway
- CVE-2026-76271Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise
- CVE-2026-76270Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise
- CVE-2026-76269Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise
- CVE-2026-76268Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise
- CVE-2026-76267Log Injection through the REST API in Splunk App for Splunk O11y Cloud
- CVE-2026-76266Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise
- CVE-2026-76265Improper Access Control through REST API Endpoints in Splunk Secure Gateway
- CVE-2026-76264Improper Authorization through the REST API in Splunk Enterprise
- CVE-2026-76405Information Disclosure through Cleartext Storage in the App Key Value Store in the Splunk On-Call (VictorOps) app
- CVE-2026-76404Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server app
- CVE-2026-76403Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka
- CVE-2026-76402Server-Side Request Forgery (SSRF) through the REST API in Splunk Connect for Kafka
- CVE-2026-76401Regular Expression Denial of Service (DoS) through the REST API in Splunk Connect for Kafka
- CVE-2026-76400Denial of Service (DoS) through the REST API in Splunk Connect for Kafka