Splunk vulnerabilities
347 CVEs and advisories name Splunk as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-20239Sensitive Information Disclosure through Log Files in Splunk Enterprise
- CVE-2026-20240Denial of Service through coldToFrozen.sh Script in Splunk Enterprise
- CVE-2026-20205Sensitive Information Disclosure in ''_internal'' index in Splunk MCP Server app
- CVE-2026-20203Improper Access Control in Data Model Acceleration in Splunk Enterprise
- CVE-2026-20204Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise
- CVE-2026-20202Improper Input Validation during User Account Creation in Splunk Enterprise
- CVE-2026-20163Remote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise
- CVE-2026-20162Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise
- CVE-2026-20166Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise
- CVE-2026-20164Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise
- CVE-2026-20165Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise
- CVE-2026-20142Sensitive Information Disclosure in "_internal" index in Splunk Enterprise
- CVE-2026-20138Sensitive Information Disclosure in "_internal" index in Splunk Enterprise
- CVE-2026-20139Client-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise
- CVE-2026-20144Sensitive Information Disclosure in ''_internal'' index in Splunk Enterprise
- CVE-2026-20141Improper Access Control in Splunk Monitoring Console App
- CVE-2026-20137Risky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise
- CVE-2025-20388Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise
- CVE-2025-20389Improper Input Validation in "label" column field in Splunk Secure Gateway App
- CVE-2025-20387Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade
- CVE-2025-20383Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app
- CVE-2025-20384Unauthenticated Log Injection in Splunk Enterprise
- CVE-2025-20386Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgrade
- CVE-2025-20385Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise
- CVE-2025-20381SPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP tool
- CVE-2025-20382URL validation bypass through Views Dashboard in Splunk Enterprise
- CVE-2025-20373Sensitive Information Disclosure in “_internal“ index through Splunk Add-On for Palo Alto Networks
- CVE-2025-20379Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprise
- CVE-2025-20378Open Redirect on Web Login endpoint in Splunk Enterprise
- CVE-2025-20368Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise