SM
Product
Splunk MCP Server
by Splunk · last CVE Oct 7, 2026
3
CVEs
0
On KEV
7.2
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch

Add Splunk MCP Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-20381
5.4
0%
Dec 3
SPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP tool
Affected: 0.2 before 0.2.4
CVE-2026-76286
5.3
0%
Oct 7
Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server
Affected: 1.2 before 1.2.1
Showing 2