Splunk Splunk MCP Server

• CVE-2026-76286 Medium 5.3 Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server 0.2%
• CVE-2026-20205 High 7.2 Sensitive Information Disclosure in ''_internal'' index in Splunk MCP Server app 0.3%
• CVE-2025-20381 Medium 5.4 SPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP tool 0.2%