Splunk vulnerabilities
347 CVEs and advisories name Splunk as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-76309Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise
- CVE-2026-76263Improper Access Control through the REST API in Splunk Enterprise
- CVE-2026-76262Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise
- CVE-2026-76261Insecure Default Access Control List through the REST API in Splunk Secure Gateway
- CVE-2026-76260Incorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise
- CVE-2026-76259Improper Privilege Management on the Management Port in Splunk Enterprise for Windows
- CVE-2026-76258Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway
- CVE-2026-76257Missing Authorization through REST API Endpoints in Splunk Secure Gateway
- CVE-2026-76256Information Exposure through REST API Endpoints in Splunk Secure Gateway
- CVE-2026-76255Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise
- CVE-2026-76254SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise
- CVE-2026-76253Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise
- CVE-2026-76252Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise
- CVE-2026-76251Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud
- CVE-2026-20298Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise
- CVE-2026-20296SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise
- CVE-2026-20297Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise
- CVE-2026-20266OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit
- CVE-2026-20265Insecure Default Domain Allowlist in Splunk AI Toolkit
- CVE-2026-20258Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise
- CVE-2026-20253Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise
- CVE-2026-20260Log Injection through HTTP Request Paths in Splunk SOAR
- CVE-2026-20252Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise
- CVE-2026-20257Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise
- CVE-2026-20259Improper Access Control in Splunk Enterprise
- CVE-2026-20255Improper Input Validation through Classic Dashboards in Splunk Enterprise
- CVE-2026-20251Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway
- CVE-2026-20254Information Disclosure through External Content Restriction Bypass in Splunk Enterprise
- CVE-2026-20256Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise
- CVE-2026-20238Improper Access Control through Role Inheritance in Splunk AI Toolkit app