[ Vendor · 55 CVEs ]
Splunk
CVEs affecting Splunk published in the last 30 days, plus any Splunk CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-76530 | 21 Oct 2026 | CVSS 8.8 | Splunk SOARAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76531 | 21 Oct 2026 | CVSS 9.9 | Splunk SOARAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76308 | 21 Oct 2026 | CVSS 6.5 | Splunk SOARIn Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition through the Representational State Transfer… | |
| CVE-2026-76406 | 21 Oct 2026 | CVSS 5.9 | Splunk SOARIn Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected Splunk SOAR instance could… | |
| CVE-2026-76407 | 21 Oct 2026 | Not scored yet | Splunk SOARAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76408 | 21 Oct 2026 | Not scored yet | Splunk SOARAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76526 | 21 Oct 2026 | Not scored yet | Splunk SOARAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76527 | 21 Oct 2026 | Not scored yet | Splunk SOARAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76528 | 21 Oct 2026 | Not scored yet | Splunk SOARAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76529 | 21 Oct 2026 | Not scored yet | Splunk SOARAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76300 | 21 Oct 2026 | Not scored yet | Splunk EnterpriseAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76301 | 21 Oct 2026 | Not scored yet | Splunk EnterpriseAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76302 | 21 Oct 2026 | CVSS 9.9 | Splunk EnterpriseAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76303 | 21 Oct 2026 | CVSS 5.7 | Splunk SOARIn Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store attacker-controlled content that Splunk… | |
| CVE-2026-76304 | 21 Oct 2026 | CVSS 4.3 | Splunk SOARIn Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Automation Brokers could download the… | |
| CVE-2026-76305 | 21 Oct 2026 | CVSS 6.5 | Splunk SOARIn Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view apps could download an archive of an… | |
| CVE-2026-76306 | 21 Oct 2026 | CVSS 7.5 | Splunk SOARIn Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the Representational State Transfer (REST) API to… | |
| CVE-2026-76307 | 21 Oct 2026 | CVSS 7.2 | Splunk SOARIn Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could use the Representational State Transfer… | |
| CVE-2026-76292 | 21 Oct 2026 | CVSS 6.5 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a… | |
| CVE-2026-76293 | 21 Oct 2026 | CVSS 7.2 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_xml capability could execute… | |
| CVE-2026-76294 | 21 Oct 2026 | CVSS 4.3 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could move… | |
| CVE-2026-76295 | 21 Oct 2026 | CVSS 4.3 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a user… | |
| CVE-2026-76296 | 21 Oct 2026 | CVSS 4.3 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could create… | |
| CVE-2026-76297 | 21 Oct 2026 | CVSS 4.2 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with the… | |
| CVE-2026-76298 | 21 Oct 2026 | CVSS 8.8 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk roles could derive the PostgreSQL… | |
| CVE-2026-76299 | 21 Oct 2026 | CVSS 9.9 | Splunk EnterpriseAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76287 | 21 Oct 2026 | CVSS 5.4 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capability or… | |
| CVE-2026-76288 | 21 Oct 2026 | CVSS 7.5 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single crafted request to the Splunk… | |
| CVE-2026-76289 | 21 Oct 2026 | CVSS 6.5 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could make the… | |
| CVE-2026-76290 | 21 Oct 2026 | CVSS 7.5 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package… | |
| CVE-2026-76291 | 21 Oct 2026 | CVSS 8.8 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedule_search capability could bypass… | |
| CVE-2026-76284 | 7 Oct 2026 | CVSS 9.8 | Splunk EnterpriseAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76285 | 7 Oct 2026 | CVSS 9.8 | Splunk EnterpriseAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76286 | 7 Oct 2026 | CVSS 5.3 | Splunk MCP ServerIn Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom… | |
| CVE-2026-76278 | 7 Oct 2026 | CVSS 4.3 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the edit_spl2_module_permissions capability could use… | |
| CVE-2026-76279 | 7 Oct 2026 | CVSS 4.3 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the… | |
| CVE-2026-76280 | 7 Oct 2026 | CVSS 6.3 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, an… | |
| CVE-2026-76281 | 7 Oct 2026 | CVSS 5.3 | Splunk EnterpriseAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76282 | 7 Oct 2026 | CVSS 8.8 | Splunk EnterpriseAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76283 | 7 Oct 2026 | CVSS 7.6 | Splunk EnterpriseAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76271 | 7 Oct 2026 | CVSS 6.5 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could… | |
| CVE-2026-76272 | 7 Oct 2026 | CVSS 4.3 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could cause… | |
| CVE-2026-76273 | 7 Oct 2026 | CVSS 4.3 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the… | |
| CVE-2026-76274 | 7 Oct 2026 | CVSS 6.5 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_content capability could redirect an… | |
| CVE-2026-76275 | 7 Oct 2026 | CVSS 4.3 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could access… | |
| CVE-2026-76276 | 7 Oct 2026 | CVSS 4.3 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could… | |
| CVE-2026-76277 | 7 Oct 2026 | CVSS 4.1 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create a native… | |
| CVE-2026-76264 | 7 Oct 2026 | CVSS 4.3 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could create or… | |
| CVE-2026-76265 | 7 Oct 2026 | CVSS 6.5 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, a user… | |
| CVE-2026-76266 | 7 Oct 2026 | CVSS 7.7 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running… | |
| CVE-2026-76267 | 7 Oct 2026 | CVSS 4.3 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_content capability could inject forged… | |
| CVE-2026-76268 | 7 Oct 2026 | CVSS 9.8 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer… | |
| CVE-2026-76269 | 7 Oct 2026 | CVSS 6.5 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could use a… | |
| CVE-2026-76270 | 7 Oct 2026 | CVSS 6.5 | Splunk EnterpriseIn Splunk Enterprise versions below 10.4.3, a user that holds a role with the list_spl2_modules capability could use SQL injection in SPL2 module… | |
| CVE-2026-20253 | 10 Jun 2026 | CVSS 9.8 | Splunk Enterprise Missing Authentication for Critical FunctionIn Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files… | Exploited |