Splunk Splunk Enterprise

• CVE-2026-76344 High 7.7 Path Traversal through the Search Dispatch REST API in Splunk Enterprise 0.4%
• CVE-2026-76343 Medium 6.5 Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise 0.4%
• CVE-2026-76342 Medium 5.4 Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise 0.2%
• CVE-2026-76341 Medium 5.4 Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise 0.2%
• CVE-2026-76340 Medium 5.3 Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise 0.4%
• CVE-2026-76339 Medium 5.4 SPL Injection through the geostats Command in Splunk Enterprise 0.2%
• CVE-2026-76338 High 8.1 Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise 0.5%
• CVE-2026-76337 Medium 5.3 Path Traversal through Splunk Web Static File Serving in Splunk Enterprise 0.4%
• CVE-2026-76336 High 7.1 Improper Access Control through the REST API in Splunk Enterprise 0.3%
• CVE-2026-76335 High 8.8 Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise 0.5%
• CVE-2026-76334 Medium 6.4 SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise 0.2%
• CVE-2026-76333 High 7.1 Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise 0.3%
• CVE-2026-76332 High 7.1 SPL Injection through Splunk Web in Splunk Enterprise 0.3%
• CVE-2026-76331 High 8.1 SPL Injection through the REST API in Splunk Enterprise 0.4%
• CVE-2026-76330 High 7.1 SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise 0.3%
• CVE-2026-76329 Medium 6.4 SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise 0.3%
• CVE-2026-76328 Medium 6.7 SPL Injection through Splunk Web in Splunk Enterprise 0.3%
• CVE-2026-76327 Medium 6.4 SPL Injection through Splunk Web in Splunk Secure Gateway 0.3%
• CVE-2026-76326 Medium 5.7 Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise 0.3%
• CVE-2026-76325 High 7.3 Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise 0.4%
• CVE-2026-76324 Medium 5.7 Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise 0.3%
• CVE-2026-76323 Medium 6.4 SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise 0.3%
• CVE-2026-76322 Medium 6.7 SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise 0.3%
• CVE-2026-76321 High 7.3 SPL Injection through Nearby Event Searches in Splunk Enterprise 0.4%
• CVE-2026-76320 Medium 5.9 SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise 0.3%
• CVE-2026-76319 High 8.8 Remote Code Execution (RCE) through Federated Search in Splunk Enterprise 0.6%
• CVE-2026-76318 Medium 5.7 Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise 0.3%
• CVE-2026-76317 High 8.8 Path Traversal through the Lookup Configuration REST API in Splunk Enterprise 0.6%
• CVE-2026-76316 High 8.8 Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise 0.5%
• CVE-2026-76315 High 8.8 Code Injection through Splunk Web Manager Configuration in Splunk Enterprise 0.7%
• CVE-2026-76314 High 8.8 Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise 0.8%
• CVE-2026-76313 High 8.8 Remote Code Execution (RCE) through the REST API in Splunk Enterprise 0.6%
• CVE-2026-76312 Critical 9.4 Improper Access Control through Embedded Reports in Splunk Enterprise 0.4%
• CVE-2026-76311 Critical 9.4 Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise 0.4%
• CVE-2026-76310 Critical 9.4 Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise 0.4%
• CVE-2026-76309 Medium 4.3 Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise 0.3%
• CVE-2026-76263 Medium 5.4 Improper Access Control through the REST API in Splunk Enterprise 0.3%
• CVE-2026-76262 High 7.5 Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise 0.5%
• CVE-2026-76261 Medium 5.3 Insecure Default Access Control List through the REST API in Splunk Secure Gateway 0.3%
• CVE-2026-76260 Medium 6.5 Incorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise 0.3%
• CVE-2026-76259 High 8.8 Improper Privilege Management on the Management Port in Splunk Enterprise for Windows 0.2%
• CVE-2026-76258 Medium 6.5 Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway 0.3%
• CVE-2026-76257 Medium 6.5 Missing Authorization through REST API Endpoints in Splunk Secure Gateway 0.3%
• CVE-2026-76256 Medium 4.3 Information Exposure through REST API Endpoints in Splunk Secure Gateway 0.3%
• CVE-2026-76255 Medium 6.4 Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise 0.3%
• CVE-2026-76254 High 7.5 SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise 0.4%
• CVE-2026-76253 High 8.8 Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise 0.4%
• CVE-2026-76252 Medium 6.8 Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise 0.3%
• CVE-2026-76251 High 7.1 Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud 0.3%
• CVE-2026-20298 Medium 5.3 Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise 0.3%