Splunk vulnerabilities
347 CVEs and advisories name Splunk as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-76399Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit
- CVE-2026-76398Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit
- CVE-2026-76397Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit
- CVE-2026-76396Improper Access Control through Scheduled Searches in Splunk AI Toolkit
- CVE-2026-76395Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit
- CVE-2026-76394Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit
- CVE-2026-76393Race Condition during Model Upload through the REST API in Splunk AI Toolkit
- CVE-2026-76392Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit
- CVE-2026-76391Improper Privilege Management through Agent Run History in Splunk AI Toolkit
- CVE-2026-76390Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud
- CVE-2026-76389Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security Cloud
- CVE-2026-76388Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security
- CVE-2026-76387SPL Injection through the REST API in Splunk Enterprise Security
- CVE-2026-76386Information Disclosure through Action Parameters in Zoom app for Splunk SOAR
- CVE-2026-76385Information Disclosure through Action Parameters in Venafi app for Splunk SOAR
- CVE-2026-76384Information Disclosure through Action Parameters in Splunk Attack Analyzer Connector for Splunk SOAR
- CVE-2026-76383Information Disclosure through Action Parameters in RSA SecurID Authentication Manager app for Splunk SOAR
- CVE-2026-76382Information Disclosure through Action Parameters in Phantom app for Splunk SOAR
- CVE-2026-76381Information Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOAR
- CVE-2026-76380Information Disclosure through Action Parameters in CrowdStrike OAuth API app for Splunk SOAR
- CVE-2026-76379Information Disclosure through Action Parameters in Cisco Webex app for Splunk SOAR
- CVE-2026-76378Information Disclosure through Action Parameters in Cisco Secure Malware Analytics app for Splunk SOAR
- CVE-2026-76377Information Disclosure through Action Parameters in Azure AD Graph app for Splunk SOAR
- CVE-2026-76376Information Disclosure through Action Parameters in AWS IAM app for Splunk SOAR
- CVE-2026-76375Information Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR
- CVE-2026-76374Information Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR
- CVE-2026-76373Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR
- CVE-2026-76372Incorrect Permission Assignment through Safe Mode in Nmap Scanner for Splunk SOAR
- CVE-2026-76371Incorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOAR
- CVE-2026-76370Information Disclosure through the REST API in Splunk SOAR