SP
Vendor
Splunk
728
CVEs
4
On KEV
81
New 30D
Products
SE9.9
Splunk Enterprise
Splunk
124 CVEs1 on KEV38 new
SP10.0
Splunk
Splunk
286 CVEs2 on KEV22 new
SS9.9
Splunk SOAR
Splunk
31 CVEs0 on KEV15 new
SS8.8
Splunk Secure Gateway
Splunk
17 CVEs0 on KEV5 new
SM5.3
Splunk MCP Server
Splunk
1 CVEs0 on KEV1 new
EN9.8
Enterprise
Splunk
1 CVEs1 on KEV0 new
SC9.1
Splunk Cloud Platform
Splunk
109 CVEs0 on KEV0 new
UF9.8
Universal Forwarder
Splunk
61 CVEs0 on KEV0 new
SO8.1
Soar
Splunk
16 CVEs0 on KEV0 new
AT9.1
AI Toolkit
Splunk
12 CVEs0 on KEV0 new
SA9.1
Splunk AI Toolkit
Splunk
12 CVEs0 on KEV0 new
CL8.8
Cloud
Splunk
9 CVEs0 on KEV0 new
CF8.2
Connect For Kafka
Splunk
4 CVEs0 on KEV0 new
ES8.1
Enterprise Security
Splunk
4 CVEs0 on KEV0 new
SC8.2
Splunk Connect for Kafka
Splunk
4 CVEs0 on KEV0 new
AL5.4
AD LDAP app for Splunk SOAR
Splunk
3 CVEs0 on KEV0 new
AB7.2
Add-on Builder
Splunk
3 CVEs0 on KEV0 new
SA8.1
Splunk App For Lookup File Editing
Splunk
3 CVEs0 on KEV0 new
CT8.8
Cisco Talos Intelligence for Enterprise Security Cloud
Splunk
2 CVEs0 on KEV0 new
SE8.1
Splunk Enterprise Security
Splunk
2 CVEs0 on KEV0 new
AI4.3
AWS IAM app for Splunk SOAR
Splunk
1 CVEs0 on KEV0 new
AA4.3
Azure AD Graph app for Splunk SOAR
Splunk
1 CVEs0 on KEV0 new
CS4.3
Cisco Secure Malware Analytics app for Splunk SOAR
Splunk
1 CVEs0 on KEV0 new
CW4.3
Cisco Webex app for Splunk SOAR
Splunk
1 CVEs0 on KEV0 new
CS5.3
Cloudconnect Software Development Kit
Splunk
1 CVEs0 on KEV0 new
CO4.3
CrowdStrike OAuth API app for Splunk SOAR
Splunk
1 CVEs0 on KEV0 new
FI2.7
FireAMP
Splunk
1 CVEs0 on KEV0 new
HC8.8
Hadoop Connect
Splunk
1 CVEs0 on KEV0 new
IS8.6
IT Service Intelligence
Splunk
1 CVEs0 on KEV0 new
MC9.1
Model Context Protocol Server
Splunk
1 CVEs0 on KEV0 new
MG4.3
MS Graph for Active Directory app for Splunk SOAR
Splunk
1 CVEs0 on KEV0 new
NS6.6
Nmap Scanner
Splunk
1 CVEs0 on KEV0 new
NO7.8
Nozzle
Splunk
1 CVEs0 on KEV0 new
ON4.3
On-call
Splunk
1 CVEs0 on KEV0 new
PA4.3
Phantom app for Splunk SOAR
Splunk
1 CVEs0 on KEV0 new
RS4.3
RSA SecurID Authentication Manager app for Splunk SOAR
Splunk
1 CVEs0 on KEV0 new
SD8.1
Software Development Kit
Splunk
1 CVEs0 on KEV0 new
SA6.4
Splunk App for SOAR
Splunk
1 CVEs0 on KEV0 new
SA9.9
Splunk App For Stream
Splunk
1 CVEs0 on KEV0 new
SA4.3
Splunk Attack Analyzer Connector for Splunk SOAR
Splunk
1 CVEs0 on KEV0 new
SM9.1
Splunk MCP Server app
Splunk
1 CVEs0 on KEV0 new
SO4.3
Splunk On-Call (VictorOps)
Splunk
1 CVEs0 on KEV0 new
VA4.3
Venafi app for Splunk SOAR
Splunk
1 CVEs0 on KEV0 new
ZA4.3
Zoom app for Splunk SOAR
Splunk
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-76531 New | SS Splunk SOAR Splunk | 9.9 | Oct 21 | Files or Directories Accessible to External Parties in Splunk SOAR |
| CVE-2026-76530 New | SS Splunk SOAR Splunk | 8.8 | Oct 21 | Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR |
| CVE-2026-76529 New | SS Splunk SOAR Splunk | – | Oct 21 | Improper Protection of Alternate Path in Splunk SOAR |
| CVE-2026-76528 New | SS Splunk SOAR Splunk | – | Oct 21 | Protection Mechanism Failure in Splunk SOAR |
| CVE-2026-76527 New | SS Splunk SOAR Splunk | – | Oct 21 | Improper Check or Handling of Exceptional Conditions in Splunk SOAR |
| CVE-2026-76526 New | SS Splunk SOAR Splunk | 8.8 | Oct 21 | Improper Neutralization in Splunk SOAR |
| CVE-2026-76408 New | SS Splunk SOAR Splunk | – | Oct 21 | Improper Control of a Resource Through its Lifetime in Splunk SOAR |
| CVE-2026-76407 New | SS Splunk SOAR Splunk | – | Oct 21 | Improper Access Control in Splunk SOAR |
| CVE-2026-76406 New | SS Splunk SOAR Splunk | 5.9 | Oct 21 | Information Disclosure through REST API Authentication in Splunk SOAR |
| CVE-2026-76308 New | SS Splunk SOAR Splunk | 6.5 | Oct 21 | Missing Authorization through the REST API in Splunk SOAR |
| CVE-2026-76307 New | SS Splunk SOAR Splunk | 7.2 | Oct 21 | Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR |
| CVE-2026-76306 New | SS Splunk SOAR Splunk | 7.5 | Oct 21 | Information Disclosure through REST API Query Filters in Splunk SOAR |
| CVE-2026-76305 New | SS Splunk SOAR Splunk | 6.5 | Oct 21 | Improper Access Control during App Downloads in Splunk SOAR |
| CVE-2026-76304 New | SS Splunk SOAR Splunk | 4.3 | Oct 21 | Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR |
| CVE-2026-76303 New | SS Splunk SOAR Splunk | 5.7 | Oct 21 | Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR |
| CVE-2026-76302 New | SE Splunk Enterprise Splunk | 9.9 | Oct 21 | Security Hardening in Splunk Enterprise - October 2026 |
| CVE-2026-76301 New | SE Splunk Enterprise Splunk | 9.8 | Oct 21 | Security Hardening in Splunk Enterprise - October 2026 |
| CVE-2026-76300 New | SE Splunk Enterprise Splunk | 8.8 | Oct 21 | Security Hardening in Splunk Enterprise - October 2026 |
| CVE-2026-76299 New | SE Splunk Enterprise Splunk | 9.9 | Oct 21 | Security Hardening in Splunk Enterprise - October 2026 |
| CVE-2026-76298 New | SE Splunk Enterprise Splunk | 8.8 | Oct 21 | Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise |
| CVE-2026-76297 New | SE Splunk Enterprise Splunk | 4.2 | Oct 21 | Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise |
| CVE-2026-76296 New | SE Splunk Enterprise Splunk | 4.3 | Oct 21 | Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise |
| CVE-2026-76295 New | SE Splunk Enterprise Splunk | 4.3 | Oct 21 | SPL Injection through the REST API in Splunk Secure Gateway |
| CVE-2026-76294 New | SE Splunk Enterprise Splunk | 4.3 | Oct 21 | Improper Access Control in Field Extraction Management in Splunk Enterprise |
| CVE-2026-76293 New | SE Splunk Enterprise Splunk | 7.2 | Oct 21 | Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise |
| CVE-2026-76292 New | SS Splunk Secure Gateway Splunk | 6.5 | Oct 21 | Missing Authorization through REST API Endpoints in Splunk Secure Gateway |
| CVE-2026-76291 New | SE Splunk Enterprise Splunk | 8.8 | Oct 21 | Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise |
| CVE-2026-76290 New | SE Splunk Enterprise Splunk | 7.5 | Oct 21 | Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise |
| CVE-2026-76289 New | SE Splunk Enterprise Splunk | 6.5 | Oct 21 | Denial of Service (DoS) through the REST API in Splunk Enterprise |
| CVE-2026-76288 New | SE Splunk Enterprise Splunk | 7.5 | Oct 21 | Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise |
| CVE-2026-76287 New | SE Splunk Enterprise Splunk | 5.4 | Oct 21 | Authorization Bypass in the Data Management REST API in Splunk Enterprise |
| CVE-2026-76286 | SM Splunk MCP Server Splunk | 5.3 | Oct 7 | Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server |
| CVE-2026-76285 | SE Splunk Enterprise Splunk | 9.8 | Oct 7 | Improper Adherence to Coding Standards in Splunk Enterprise |
| CVE-2026-76284 | SE Splunk Enterprise Splunk | 9.8 | Oct 7 | Improper Neutralization in Splunk Enterprise |
| CVE-2026-76283 | SE Splunk Enterprise Splunk | 7.6 | Oct 7 | Protection Mechanism Failure in Splunk Enterprise |
| CVE-2026-76282 | SE Splunk Enterprise Splunk | 8.8 | Oct 7 | Improper Control of a Resource Through its Lifetime in Splunk Enterprise |
| CVE-2026-76281 | SE Splunk Enterprise Splunk | 5.3 | Oct 7 | Improper Access Control in Splunk Enterprise |
| CVE-2026-76280 | SS Splunk Secure Gateway Splunk | 6.3 | Oct 7 | Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway |
| CVE-2026-76279 | SE Splunk Enterprise Splunk | 4.3 | Oct 7 | Improper Input Validation of Index Names through the collect Command in Splunk Enterprise |
| CVE-2026-76278 | SE Splunk Enterprise Splunk | 4.3 | Oct 7 | Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise |
| CVE-2026-76277 | SE Splunk Enterprise Splunk | 4.1 | Oct 7 | Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise |
| CVE-2026-76276 | SE Splunk Enterprise Splunk | 4.3 | Oct 7 | Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise |
| CVE-2026-76275 | SE Splunk Enterprise Splunk | 4.3 | Oct 7 | Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise |
| CVE-2026-76274 | SE Splunk Enterprise Splunk | 6.5 | Oct 7 | Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud |
| CVE-2026-76273 | SE Splunk Enterprise Splunk | 4.3 | Oct 7 | Improper Input Validation through the collect Command in Splunk Enterprise |
| CVE-2026-76272 | SE Splunk Enterprise Splunk | 4.3 | Oct 7 | Missing Access Control through the REST API in Splunk Secure Gateway |
| CVE-2026-76271 | SE Splunk Enterprise Splunk | 6.5 | Oct 7 | Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise |
| CVE-2026-76270 | SE Splunk Enterprise Splunk | 6.5 | Oct 7 | Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise |
| CVE-2026-76269 | SE Splunk Enterprise Splunk | 6.5 | Oct 7 | Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise |
| CVE-2026-76268 | SE Splunk Enterprise Splunk | 9.8 | Oct 7 | Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise |
| CVE-2026-76267 | SE Splunk Enterprise Splunk | 4.3 | Oct 7 | Log Injection through the REST API in Splunk App for Splunk O11y Cloud |
| CVE-2026-76266 | SE Splunk Enterprise Splunk | 7.7 | Oct 7 | Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise |
| CVE-2026-76265 | SE Splunk Enterprise Splunk | 6.5 | Oct 7 | Improper Access Control through REST API Endpoints in Splunk Secure Gateway |
| CVE-2026-76264 | SE Splunk Enterprise Splunk | 4.3 | Oct 7 | Improper Authorization through the REST API in Splunk Enterprise |
| CVE-2026-76405 | SO Splunk On-Call (VictorOps) Splunk | 4.3 | Aug 19 | Information Disclosure through Cleartext Storage in the App Key Value Store in the Splunk On-Call (VictorOps) app |
| CVE-2026-76404 | SM Splunk MCP Server app Splunk | 9.1 | Aug 19 | Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server app |
| CVE-2026-76403 | SC Splunk Connect for Kafka Splunk | 7.4 | Aug 19 | Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka |
| CVE-2026-76402 | SC Splunk Connect for Kafka Splunk | 8.2 | Aug 19 | Server-Side Request Forgery (SSRF) through the REST API in Splunk Connect for Kafka |
| CVE-2026-76401 | SC Splunk Connect for Kafka Splunk | 5.9 | Aug 19 | Regular Expression Denial of Service (DoS) through the REST API in Splunk Connect for Kafka |
| CVE-2026-76400 | SC Splunk Connect for Kafka Splunk | 5.9 | Aug 19 | Denial of Service (DoS) through the REST API in Splunk Connect for Kafka |