Splunk - vulnerabilities (CVEs)

451 CVEs in 55 products, 54 in the last 30 days, newest from 2026-10-21.

Products

Splunk - 286 CVEs
Splunk Enterprise - 250 CVEs
Splunk Cloud Platform - 111 CVEs
Universal Forwarder - 62 CVEs
Splunk Soar - 31 CVEs
Splunk Secure Gateway - 20 CVEs
Soar - 16 CVEs
Ai Toolkit - 12 CVEs
Splunk Ai Toolkit - 12 CVEs
Splunk Cloud - 11 CVEs
Cloud - 10 CVEs
Enterprise Security - 5 CVEs
Splunk Enterprise Cloud - 5 CVEs
Connect For Kafka - 4 CVEs
Splunk Connect For Kafka - 4 CVEs
Ad Ldap App For Splunk Soar - 3 CVEs
Add-on Builder - 3 CVEs
Splunk Add-on Builder - 3 CVEs
Splunk App For Lookup File Editing - 3 CVEs
Splunk Mcp Server - 3 CVEs
Cisco Talos Intelligence For Enterprise Security Cloud - 2 CVEs
Splunk Enterprise Security - 2 CVEs
Splunk Enterprise Security Es - 2 CVEs
Aws Iam App For Splunk Soar - 1 CVEs
Azure Ad Graph App For Splunk Soar - 1 CVEs
Cisco Secure Malware Analytics App For Splunk Soar - 1 CVEs
Cisco Webex App For Splunk Soar - 1 CVEs
Cloudconnect Software Development Kit - 1 CVEs
Crowdstrike Oauth Api App For Splunk Soar - 1 CVEs
Fireamp - 1 CVEs
Hadoop Connect - 1 CVEs
It Service Intelligence - 1 CVEs
Model Context Protocol Server - 1 CVEs
Ms Graph For Active Directory App For Splunk Soar - 1 CVEs
Nmap Scanner - 1 CVEs
Nozzle - 1 CVEs
On-call - 1 CVEs
Phantom App For Splunk Soar - 1 CVEs
Rsa Securid Authentication Manager App For Splunk Soar - 1 CVEs
Software Development Kit - 1 CVEs
Splunk Add-on For Palo Alto Networks - 1 CVEs
Splunk App For Soar - 1 CVEs
Splunk App For Stream - 1 CVEs
Splunk Attack Analyzer Connector For Splunk Soar - 1 CVEs
Splunk Cloudconnect Sdk - 1 CVEs
Splunk Itsi - 1 CVEs
Splunk Mcp Server App - 1 CVEs
Splunk On-call Victorops - 1 CVEs
Splunk Soar Cloud - 1 CVEs
Splunk Soar On-premises - 1 CVEs
Splunk Supporting Add-on For Active Directory - 1 CVEs
Splunkuniversalforwarder For Windows - 1 CVEs
Universal Forwarders - 1 CVEs
Venafi App For Splunk Soar - 1 CVEs
Zoom App For Splunk Soar - 1 CVEs

Newest CVEs of Splunk

CVE-2026-76531 - CVSS 9.9 (critical), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
CVE-2026-76530 - CVSS 8.8 (high), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
CVE-2026-76529, 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
CVE-2026-76528, 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
CVE-2026-76527, 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
CVE-2026-76526 - CVSS 8.8 (high), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
CVE-2026-76408, 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
CVE-2026-76407, 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
CVE-2026-76406 - CVSS 5.9 (medium), 2026-10-21: In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected Splunk SOAR instance could submit Basic…
CVE-2026-76308 - CVSS 6.5 (medium), 2026-10-21: In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition through the Representational State Transfer (REST) API…
CVE-2026-76307 - CVSS 7.2 (high), 2026-10-21: In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could use the Representational State Transfer (REST)…
CVE-2026-76306 - CVSS 7.5 (high), 2026-10-21: In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the Representational State Transfer (REST) API to infer…
CVE-2026-76305 - CVSS 6.5 (medium), 2026-10-21: In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view apps could download an archive of an installed…
CVE-2026-76304 - CVSS 4.3 (medium), 2026-10-21: In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Automation Brokers could download the Splunk SOAR…
CVE-2026-76303 - CVSS 5.7 (medium), 2026-10-21: In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store attacker-controlled content that Splunk SOAR…
CVE-2026-76302 - CVSS 9.9 (critical), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
CVE-2026-76300 - CVSS 8.8 (high), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
CVE-2026-76301 - CVSS 9.8 (critical), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
CVE-2026-76299 - CVSS 9.9 (critical), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
CVE-2026-76298 - CVSS 8.8 (high), 2026-10-21: In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk roles could derive the PostgreSQL sidecar…
CVE-2026-76297 - CVSS 4.2 (medium), 2026-10-21: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with the…
CVE-2026-76296 - CVSS 4.3 (medium), 2026-10-21: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could create, move,…
CVE-2026-76295 - CVSS 4.3 (medium), 2026-10-21: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a user who does…
CVE-2026-76294 - CVSS 4.3 (medium), 2026-10-21: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could move field…
CVE-2026-76293 - CVSS 7.2 (high), 2026-10-21: In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_xml capability could execute arbitrary…
CVE-2026-76292 - CVSS 6.5 (medium), 2026-10-21: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a…
CVE-2026-76291 - CVSS 8.8 (high), 2026-10-21: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedule_search capability could bypass the…
CVE-2026-76290 - CVSS 7.5 (high), 2026-10-21: In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download…
CVE-2026-76289 - CVSS 6.5 (medium), 2026-10-21: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could make the Splunk…
CVE-2026-76288 - CVSS 7.5 (high), 2026-10-21: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single crafted request to the Splunk Web…