Latest vulnerabilities for vendor "splunk"

Splunk splunkSensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

Risk 38

Severity

6.5

First published (updated )

CVE-2026-20298

Splunk splunkSPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise

Risk 67

Severity

8.3

First published (updated )

CVE-2026-20296

Splunk splunkPath Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise

Risk 66

Severity

7.2

First published (updated )

CVE-2026-20297

CISA Adds Splunk Enterprise RCE (CVE-2026-20253) to KEV - CVSS 9.8. How are your SOCs handling the PostgreSQL sidecar mitigation?

First published (updated )

Social

BleepingComputerCISA: Splunk Enterprise flaw actively exploited, patch by Sunday

Exploited

First published (updated )

News

BleepingComputer

Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure

First published (updated )

Social

Splunk Splunk AI ToolkitOS Command Injection in the btool Configuration Helper in Splunk AI Toolkit

Risk 72

Severity

9.1

First published (updated )

CVE-2026-20266

Splunk Splunk AI ToolkitInsecure Default Domain Allowlist in Splunk AI Toolkit

Risk 22

Severity

4.3

First published (updated )

CVE-2026-20265

Splunk Enterprise had an unauthenticated RCE sitting in your security stack

First published (updated )

Social

Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) - watchTowr Labs

First published (updated )

Social

Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) - watchTowr Labs

First published (updated )

Social

Splunk Splunk Cloud PlatformStored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise

Risk 65

Severity

7.1

First published (updated )

CVE-2026-20258

Splunk splunkSplunk Enterprise Missing Authentication for Critical Function Vulnerability

Risk 99

Severity

9.8

Exploited

First published (updated )

CVE-2026-20253

Splunk Splunk SOARLog Injection through HTTP Request Paths in Splunk SOAR

Risk 22

Severity

4.3

First published (updated )

CVE-2026-20260

Splunk Splunk Cloud PlatformServer-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise

Risk 58

Severity

7.6

First published (updated )

CVE-2026-20252

Splunk Splunk Cloud PlatformImproper Input Validation through Classic Dashboard CSS in Splunk Enterprise

Risk 33

Severity

5.7

First published (updated )

CVE-2026-20257

Splunk Splunk Cloud PlatformImproper Access Control in Splunk Enterprise

Risk 39

Severity

5.5

First published (updated )

CVE-2026-20259

Splunk Splunk Cloud PlatformRemote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

Risk 79

Severity

8.8

First published (updated )

CVE-2026-20251

Splunk Splunk Cloud PlatformImproper Input Validation through Classic Dashboards in Splunk Enterprise

Risk 33

Severity

5.7

First published (updated )

CVE-2026-20255

Splunk Splunk Cloud PlatformInformation Disclosure through External Content Restriction Bypass in Splunk Enterprise

Risk 33

Severity

5.7

First published (updated )

CVE-2026-20254

Splunk Splunk Cloud PlatformImproper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise

Risk 33

Severity

5.7

First published (updated )

CVE-2026-20256

Splunk Splunk AI ToolkitImproper Access Control through Role Inheritance in Splunk AI Toolkit app

Risk 38

Severity

6.5

First published (updated )

CVE-2026-20238

Splunk Splunk Cloud PlatformSensitive Information Disclosure through Log Files in Splunk Enterprise

Risk 70

Severity

7.5

First published (updated )

CVE-2026-20239

Splunk Splunk Cloud PlatformDenial of Service through coldToFrozen.sh Script in Splunk Enterprise

Risk 40

Severity

7.1

First published (updated )

CVE-2026-20240

Splunk MCP Server appSensitive Information Disclosure in ''_internal'' index in Splunk MCP Server app

Risk 66

Severity

7.2

First published (updated )

CVE-2026-20205

Splunk Splunk Cloud PlatformImproper Access Control in Data Model Acceleration in Splunk Enterprise

Risk 22

Severity

4.3

First published (updated )

CVE-2026-20203

Splunk Splunk Cloud PlatformImproper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise

Risk 65

Severity

7.1

First published (updated )

CVE-2026-20204

Splunk Splunk Cloud PlatformImproper Input Validation during User Account Creation in Splunk Enterprise

Risk 61

Severity

6.6

First published (updated )

CVE-2026-20202

Splunk Splunk Cloud PlatformRemote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise

Risk 69

Severity

8

First published (updated )

CVE-2026-20163

Splunk Splunk Cloud PlatformStored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

Risk 43

Severity

6.3

First published (updated )

CVE-2026-20162

Trending

Vendor Risk Score

Software

Splunk splunkSensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

Splunk splunkSPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise

Splunk splunkPath Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise

CISA Adds Splunk Enterprise RCE (CVE-2026-20253) to KEV - CVSS 9.8. How are your SOCs handling the PostgreSQL sidecar mitigation?

BleepingComputerCISA: Splunk Enterprise flaw actively exploited, patch by Sunday

Don't miss critical vulnerabilities

Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure

Splunk Splunk AI ToolkitOS Command Injection in the btool Configuration Helper in Splunk AI Toolkit

Splunk Splunk AI ToolkitInsecure Default Domain Allowlist in Splunk AI Toolkit

Splunk Enterprise had an unauthenticated RCE sitting in your security stack

Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) - watchTowr Labs

Don't miss critical vulnerabilities

Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) - watchTowr Labs

Splunk Splunk Cloud PlatformStored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise

Splunk splunkSplunk Enterprise Missing Authentication for Critical Function Vulnerability

Splunk Splunk SOARLog Injection through HTTP Request Paths in Splunk SOAR

Splunk Splunk Cloud PlatformServer-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise

Don't miss critical vulnerabilities

Splunk Splunk Cloud PlatformImproper Input Validation through Classic Dashboard CSS in Splunk Enterprise

Splunk Splunk Cloud PlatformImproper Access Control in Splunk Enterprise

Splunk Splunk Cloud PlatformRemote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

Splunk Splunk Cloud PlatformImproper Input Validation through Classic Dashboards in Splunk Enterprise

Splunk Splunk Cloud PlatformInformation Disclosure through External Content Restriction Bypass in Splunk Enterprise

Don't miss critical vulnerabilities

Splunk Splunk Cloud PlatformImproper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise

Splunk Splunk AI ToolkitImproper Access Control through Role Inheritance in Splunk AI Toolkit app

Splunk Splunk Cloud PlatformSensitive Information Disclosure through Log Files in Splunk Enterprise

Splunk Splunk Cloud PlatformDenial of Service through coldToFrozen.sh Script in Splunk Enterprise

Splunk MCP Server appSensitive Information Disclosure in ''_internal'' index in Splunk MCP Server app

Don't miss critical vulnerabilities

Splunk Splunk Cloud PlatformImproper Access Control in Data Model Acceleration in Splunk Enterprise

Splunk Splunk Cloud PlatformImproper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise

Splunk Splunk Cloud PlatformImproper Input Validation during User Account Creation in Splunk Enterprise

Splunk Splunk Cloud PlatformRemote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise

Splunk Splunk Cloud PlatformStored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

Don't miss critical vulnerabilities

Company

Resources

Contact