Splunk vulnerabilities
347 CVEs and advisories name Splunk as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-76339SPL Injection through the geostats Command in Splunk Enterprise
- CVE-2026-76338Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise
- CVE-2026-76337Path Traversal through Splunk Web Static File Serving in Splunk Enterprise
- CVE-2026-76336Improper Access Control through the REST API in Splunk Enterprise
- CVE-2026-76335Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise
- CVE-2026-76334SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise
- CVE-2026-76333Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise
- CVE-2026-76332SPL Injection through Splunk Web in Splunk Enterprise
- CVE-2026-76331SPL Injection through the REST API in Splunk Enterprise
- CVE-2026-76330SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise
- CVE-2026-76329SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise
- CVE-2026-76328SPL Injection through Splunk Web in Splunk Enterprise
- CVE-2026-76327SPL Injection through Splunk Web in Splunk Secure Gateway
- CVE-2026-76326Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise
- CVE-2026-76325Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise
- CVE-2026-76324Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise
- CVE-2026-76323SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise
- CVE-2026-76322SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise
- CVE-2026-76321SPL Injection through Nearby Event Searches in Splunk Enterprise
- CVE-2026-76320SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise
- CVE-2026-76319Remote Code Execution (RCE) through Federated Search in Splunk Enterprise
- CVE-2026-76318Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise
- CVE-2026-76317Path Traversal through the Lookup Configuration REST API in Splunk Enterprise
- CVE-2026-76316Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise
- CVE-2026-76315Code Injection through Splunk Web Manager Configuration in Splunk Enterprise
- CVE-2026-76314Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise
- CVE-2026-76313Remote Code Execution (RCE) through the REST API in Splunk Enterprise
- CVE-2026-76312Improper Access Control through Embedded Reports in Splunk Enterprise
- CVE-2026-76311Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise
- CVE-2026-76310Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise