SP
Product
Splunk
On CISA KEVExploited in the wild
286
CVEs
2
On KEV
10.0
Max CVSS
22
New 30D
Severity mix
Critical 12High 89Medium 149Low 9
Watch
Add Splunk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20253 In wildKEV | 9.8 | Jun 10 | Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise Affected: 10.0.0 before 10.0.7; 10.2.0 before 10.2.4 |
| CVE-2022-32158 | 10.0 | Jun 15 | Splunk Enterprise deployment servers in versions before 8.1.10.1, 8.2.6.1, and 9.0 let clients deploy forwarder bundles to other deployment clients through the deployment server Affected: before 9.0 |
| CVE-2026-76285 | 9.8 | Oct 7 | Improper Adherence to Coding Standards in Splunk Enterprise Affected: 9.4.0 before 9.4.15; 10.0.0 before 10.0.10; 10.2.0 before 10.2.7; 10.4.0 before 10.4.3 |
| CVE-2026-76284 | 9.8 | Oct 7 | Improper Neutralization in Splunk Enterprise Affected: 9.4.0 before 9.4.15; 10.0.0 before 10.0.10; 10.2.0 before 10.2.7; 10.4.0 before 10.4.3 |
| CVE-2026-76268 | 9.8 | Oct 7 | Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise Affected: 10.2.0 before 10.2.7; 10.4.0 before 10.4.3 |
| CVE-2022-37437 | 9.8 | Aug 16 | When using Ingest Actions to configure a destination that resides on Amazon Simple Storage Service (S3) in Splunk Web, TLS certificate validation is not correctly performed and… Affected: 9.0.0 |
| CVE-2017-17067 | 9.8 | Nov 30 | Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12, when the SAML authType is enabled,… Affected: 6.3.0 before 6.3.12; 6.4.0 before 6.4.9; 6.5.0 before 6.5.6; 6.6.0 before 6.6.3.2; 7.0.0 before 7.0.0.1 |
| CVE-2016-10126 | 9.8 | Jan 10 | Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.x before 6.3.8, and 6.4.x before 6.4.4 allows remote… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +34 more |
| CVE-2026-76312 | 9.4 | Aug 19 | Improper Access Control through Embedded Reports in Splunk Enterprise Affected: 9.4.0 before 9.4.14; 10.0.0 before 10.0.9; 10.2.0 before 10.2.6; 10.4.0 |
| CVE-2026-76311 | 9.4 | Aug 19 | Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise Affected: 9.4.0 before 9.4.14; 10.0.0 before 10.0.9; 10.2.0 before 10.2.6; 10.4.0 before 10.4.2 |
| CVE-2026-76310 | 9.4 | Aug 19 | Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise Affected: 9.4.0 before 9.4.14; 10.0.0 before 10.0.9; 10.2.0 before 10.2.6; 10.4.0 before 10.4.2 |
| CVE-2022-32151 | 9.1 | Jun 15 | The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate authority (CA) certificate stores by default… Affected: before 9.0 |
Showing 12