SE
Product
Splunk Enterprise
On CISA KEVExploited in the wild
148
CVEs
1
On KEV
9.9
Max CVSS
38
New 30D
Severity mix
Critical 10High 49Medium 86Low 3
Watch
Add Splunk Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20253 In wildKEV | 9.8 | Jun 10 | Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise Affected: 10.2 before 10.2.4; 10.0 before 10.0.7 |
| CVE-2026-76302 New | 9.9 | Oct 21 | Security Hardening in Splunk Enterprise - October 2026 Affected: 10.4 before 10.4.4; 10.2 before 10.2.8; 10.0 before 10.0.11; 9.4 before 9.4.16 |
| CVE-2026-76299 New | 9.9 | Oct 21 | Security Hardening in Splunk Enterprise - October 2026 Affected: 10.4 before 10.4.4; 10.2 before 10.2.8; 10.0 before 10.0.11; 9.4 before 9.4.16 |
| CVE-2026-76301 New | 9.8 | Oct 21 | Security Hardening in Splunk Enterprise - October 2026 Affected: 10.4 before 10.4.4; 10.2 before 10.2.8; 10.0 before 10.0.11; 9.4 before 9.4.16 |
| CVE-2026-76285 | 9.8 | Oct 7 | Improper Adherence to Coding Standards in Splunk Enterprise Affected: 10.4 before 10.4.3; 10.2 before 10.2.7; 10.0 before 10.0.10; 9.4 before 9.4.15 |
| CVE-2026-76284 | 9.8 | Oct 7 | Improper Neutralization in Splunk Enterprise Affected: 10.4 before 10.4.3; 10.2 before 10.2.7; 10.0 before 10.0.10; 9.4 before 9.4.15 |
| CVE-2026-76268 | 9.8 | Oct 7 | Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise Affected: 10.4 before 10.4.3; 10.2 before 10.2.7 |
| CVE-2026-76312 | 9.4 | Aug 19 | Improper Access Control through Embedded Reports in Splunk Enterprise Affected: 10.4 before 10.4.1; 10.2 before 10.2.6; 10.0 before 10.0.9; 9.4 before 9.4.14 |
| CVE-2026-76311 | 9.4 | Aug 19 | Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise Affected: 10.4 before 10.4.2; 10.2 before 10.2.6; 10.0 before 10.0.9; 9.4 before 9.4.14 |
| CVE-2026-76310 | 9.4 | Aug 19 | Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise Affected: 10.4 before 10.4.2; 10.2 before 10.2.6; 10.0 before 10.0.9; 9.4 before 9.4.14 |
Showing 10