Vulnerabilities in Splunk
337 resultsCVE-2026-76381MEDIUMInformation Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOAREPSS 0.2%CVE-2026-76393MEDIUMRace Condition during Model Upload through the REST API in Splunk AI ToolkitEPSS 0.2%CVE-2026-20296HIGHSPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk EnterpriseEPSS 0.2%CVE-2026-20166MEDIUMSensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk EnterpriseEPSS 0.2%CVE-2026-76281—Improper Access Control in Splunk EnterpriseEPSS 0.2%CVE-2026-76303MEDIUMStored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAREPSS 0.2%CVE-2026-76308MEDIUMMissing Authorization through the REST API in Splunk SOAREPSS 0.2%CVE-2026-76286MEDIUMServer-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP ServerEPSS 0.2%CVE-2026-76259HIGHImproper Privilege Management on the Management Port in Splunk Enterprise for WindowsEPSS 0.2%CVE-2023-40596HIGHSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLLEPSS 0.2%CVE-2026-76304MEDIUMSensitive Information Disclosure through Automation Broker Configuration in Splunk SOAREPSS 0.2%CVE-2026-76266HIGHLocal Privilege Escalation through Linux Package Upgrades in Splunk EnterpriseEPSS 0.2%CVE-2026-20203MEDIUMImproper Access Control in Data Model Acceleration in Splunk EnterpriseEPSS 0.2%CVE-2026-76334MEDIUMSPL Injection through Dashboard Studio Workflow Actions in Splunk EnterpriseEPSS 0.2%CVE-2026-76385MEDIUMInformation Disclosure through Action Parameters in Venafi app for Splunk SOAREPSS 0.1%CVE-2025-20233LOWIncorrect permissions set by the “chmod“ and “makedirs“ Python functions in Splunk App for Lookup File EditingEPSS 0.1%CVE-2026-76297MEDIUMFederated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk EnterpriseEPSS 0.1%