Splunk vulnerabilities
347 CVEs and advisories name Splunk as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-76369Path Traversal through Automation Broker in Splunk SOAR
- CVE-2026-76368Missing Authorization through Playbooks in Splunk SOAR
- CVE-2026-76367Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR
- CVE-2026-76366Information Disclosure through the REST API in Splunk SOAR
- CVE-2026-76365Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR
- CVE-2026-76364Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR
- CVE-2026-76363Structured Query Language Injection through the REST API in Splunk SOAR
- CVE-2026-76362Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR
- CVE-2026-76361Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR
- CVE-2026-76360Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR
- CVE-2026-76359Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR
- CVE-2026-76358Path Traversal through App Installation Tar Extraction in Splunk SOAR
- CVE-2026-76357Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR
- CVE-2026-76356Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR
- CVE-2026-76355Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise
- CVE-2026-76354Path Traversal through Search Head Clustering in Splunk Enterprise
- CVE-2026-76353Path Traversal through Knowledge Bundle Replication in Splunk Enterprise
- CVE-2026-76352Improper Authorization through the REST API in Splunk Enterprise
- CVE-2026-76351Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway
- CVE-2026-76350Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise
- CVE-2026-76349SPL Injection through Splunk Web Form Tokens in Splunk Enterprise
- CVE-2026-76348Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise
- CVE-2026-76347Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway
- CVE-2026-76346Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise
- CVE-2026-76345Remote Code Execution (RCE) through the REST API in Splunk Enterprise
- CVE-2026-76344Path Traversal through the Search Dispatch REST API in Splunk Enterprise
- CVE-2026-76343Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise
- CVE-2026-76342Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise
- CVE-2026-76341Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise
- CVE-2026-76340Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise