Splunk Splunk Enterprise

• CVE-2026-20253 Critical 9.8 Exploited Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise 96.9%
• CVE-2026-76302 Critical 9.9 Security Hardening in Splunk Enterprise - October 2026 0.4%
• CVE-2026-76301 Critical 9.8 Security Hardening in Splunk Enterprise - October 2026 0.4%
• CVE-2026-76300 High 8.8 Security Hardening in Splunk Enterprise - October 2026 0.4%
• CVE-2026-76299 Critical 9.9 Security Hardening in Splunk Enterprise - October 2026 0.3%
• CVE-2026-76298 High 8.8 Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise 0.4%
• CVE-2026-76297 Medium 4.2 Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise 0.1%
• CVE-2026-76296 Medium 4.3 Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise 0.2%
• CVE-2026-76295 Medium 4.3 SPL Injection through the REST API in Splunk Secure Gateway 0.3%
• CVE-2026-76294 Medium 4.3 Improper Access Control in Field Extraction Management in Splunk Enterprise 0.3%
• CVE-2026-76293 High 7.2 Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise 0.5%
• CVE-2026-76292 Medium 6.5 Missing Authorization through REST API Endpoints in Splunk Secure Gateway 0.3%
• CVE-2026-76291 High 8.8 Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise 0.4%
• CVE-2026-76290 High 7.5 Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise 0.5%
• CVE-2026-76289 Medium 6.5 Denial of Service (DoS) through the REST API in Splunk Enterprise 0.4%
• CVE-2026-76288 High 7.5 Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise 0.5%
• CVE-2026-76287 Medium 5.4 Authorization Bypass in the Data Management REST API in Splunk Enterprise 0.2%
• CVE-2026-76285 Critical 9.8 Improper Adherence to Coding Standards in Splunk Enterprise 0.4%
• CVE-2026-76284 Critical 9.8 Improper Neutralization in Splunk Enterprise 0.4%
• CVE-2026-76283 High 7.6 Protection Mechanism Failure in Splunk Enterprise 0.3%
• CVE-2026-76282 High 8.8 Improper Control of a Resource Through its Lifetime in Splunk Enterprise 0.4%
• CVE-2026-76281 Unrated Improper Access Control in Splunk Enterprise 0.2%
• CVE-2026-76280 Medium 6.3 Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway 0.2%
• CVE-2026-76279 Medium 4.3 Improper Input Validation of Index Names through the collect Command in Splunk Enterprise 0.2%
• CVE-2026-76278 Medium 4.3 Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise 0.2%
• CVE-2026-76277 Medium 4.1 Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise 0.2%
• CVE-2026-76276 Medium 4.3 Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise 0.2%
• CVE-2026-76275 Medium 4.3 Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise 0.3%
• CVE-2026-76274 Medium 6.5 Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud 0.3%
• CVE-2026-76273 Medium 4.3 Improper Input Validation through the collect Command in Splunk Enterprise 0.2%
• CVE-2026-76272 Medium 4.3 Missing Access Control through the REST API in Splunk Secure Gateway 0.2%
• CVE-2026-76271 Medium 6.5 Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise 0.4%
• CVE-2026-76270 Medium 6.5 Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise 0.3%
• CVE-2026-76269 Medium 6.5 Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise 0.3%
• CVE-2026-76268 Critical 9.8 Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise 4.8%
• CVE-2026-76267 Medium 4.3 Log Injection through the REST API in Splunk App for Splunk O11y Cloud 0.2%
• CVE-2026-76266 High 7.7 Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise 0.2%
• CVE-2026-76265 Medium 6.5 Improper Access Control through REST API Endpoints in Splunk Secure Gateway 0.3%
• CVE-2026-76264 Medium 4.3 Improper Authorization through the REST API in Splunk Enterprise 0.2%
• CVE-2026-76355 High 7.5 Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise 0.5%
• CVE-2026-76354 High 8.1 Path Traversal through Search Head Clustering in Splunk Enterprise 0.4%
• CVE-2026-76353 Medium 5.4 Path Traversal through Knowledge Bundle Replication in Splunk Enterprise 0.4%
• CVE-2026-76352 High 8.8 Improper Authorization through the REST API in Splunk Enterprise 0.4%
• CVE-2026-76351 High 8.8 Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway 0.4%
• CVE-2026-76350 High 8.8 Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise 0.5%
• CVE-2026-76349 Medium 6.4 SPL Injection through Splunk Web Form Tokens in Splunk Enterprise 0.3%
• CVE-2026-76348 Low 3.8 Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise 0.3%
• CVE-2026-76347 Medium 5.4 Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway 0.3%
• CVE-2026-76346 Medium 5.4 Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise 0.2%
• CVE-2026-76345 Medium 6.0 Remote Code Execution (RCE) through the REST API in Splunk Enterprise 0.5%