Splunk

Products

Exploited and recent CVEs

• CVE-2026-20253 Critical 9.8 Exploited Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise 96.9%
• CVE-2026-76531 Critical 9.9 Files or Directories Accessible to External Parties in Splunk SOAR 0.4%
• CVE-2026-76530 High 8.8 Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR 0.3%
• CVE-2026-76529 Critical 9.8 Improper Protection of Alternate Path in Splunk SOAR 0.4%
• CVE-2026-76528 Critical 9.8 Protection Mechanism Failure in Splunk SOAR 0.4%
• CVE-2026-76527 Critical 9.8 Improper Check or Handling of Exceptional Conditions in Splunk SOAR 0.4%
• CVE-2026-76526 High 8.8 Improper Neutralization in Splunk SOAR 0.4%
• CVE-2026-76408 Critical 9.8 Improper Control of a Resource Through its Lifetime in Splunk SOAR 0.4%
• CVE-2026-76407 Critical 9.8 Improper Access Control in Splunk SOAR 0.4%
• CVE-2026-76406 Medium 5.9 Information Disclosure through REST API Authentication in Splunk SOAR 0.3%
• CVE-2026-76308 Medium 6.5 Missing Authorization through the REST API in Splunk SOAR 0.2%
• CVE-2026-76307 High 7.2 Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR 0.4%
• CVE-2026-76306 High 7.5 Information Disclosure through REST API Query Filters in Splunk SOAR 0.2%
• CVE-2026-76305 Medium 6.5 Improper Access Control during App Downloads in Splunk SOAR 0.3%
• CVE-2026-76304 Medium 4.3 Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR 0.2%
• CVE-2026-76303 Medium 5.7 Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR 0.2%
• CVE-2026-76302 Critical 9.9 Security Hardening in Splunk Enterprise - October 2026 0.4%
• CVE-2026-76301 Critical 9.8 Security Hardening in Splunk Enterprise - October 2026 0.4%
• CVE-2026-76300 High 8.8 Security Hardening in Splunk Enterprise - October 2026 0.4%
• CVE-2026-76299 Critical 9.9 Security Hardening in Splunk Enterprise - October 2026 0.3%
• CVE-2026-76298 High 8.8 Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise 0.4%
• CVE-2026-76297 Medium 4.2 Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise 0.1%
• CVE-2026-76296 Medium 4.3 Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise 0.2%
• CVE-2026-76295 Medium 4.3 SPL Injection through the REST API in Splunk Secure Gateway 0.3%
• CVE-2026-76295 Medium 4.3 SPL Injection through the REST API in Splunk Secure Gateway 0.3%
• CVE-2026-76294 Medium 4.3 Improper Access Control in Field Extraction Management in Splunk Enterprise 0.3%
• CVE-2026-76293 High 7.2 Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise 0.5%
• CVE-2026-76292 Medium 6.5 Missing Authorization through REST API Endpoints in Splunk Secure Gateway 0.3%
• CVE-2026-76292 Medium 6.5 Missing Authorization through REST API Endpoints in Splunk Secure Gateway 0.3%
• CVE-2026-76291 High 8.8 Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise 0.4%