Splunk in August 2026: incidents, uptime and changes

Incidents 0

Splunk posted no incidents in August 2026.

CVEs published

• CVE-2026-76251 Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud (CVSS 7.1)
• CVE-2026-76252 Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise (CVSS 6.8)
• CVE-2026-76253 Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise (CVSS 8.8)
• CVE-2026-76254 SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise (CVSS 7.5)
• CVE-2026-76255 Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise (CVSS 6.4)
• CVE-2026-76256 Information Exposure through REST API Endpoints in Splunk Secure Gateway (CVSS 4.3)
• CVE-2026-76257 Missing Authorization through REST API Endpoints in Splunk Secure Gateway (CVSS 6.5)
• CVE-2026-76258 Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway (CVSS 6.5)
• CVE-2026-76259 Improper Privilege Management on the Management Port in Splunk Enterprise for Windows (CVSS 8.8)
• CVE-2026-76260 Incorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise (CVSS 6.5)
• CVE-2026-76261 Insecure Default Access Control List through the REST API in Splunk Secure Gateway (CVSS 5.3)
• CVE-2026-76262 Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise (CVSS 7.5)
• CVE-2026-76263 Improper Access Control through the REST API in Splunk Enterprise (CVSS 5.4)
• CVE-2026-76309 Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise (CVSS 4.3)
• CVE-2026-76310 Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise (CVSS 9.4)
• CVE-2026-76311 Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise (CVSS 9.4)
• CVE-2026-76312 Improper Access Control through Embedded Reports in Splunk Enterprise (CVSS 9.4)
• CVE-2026-76313 Remote Code Execution (RCE) through the REST API in Splunk Enterprise (CVSS 8.8)
• CVE-2026-76314 Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise (CVSS 8.8)
• CVE-2026-76315 Code Injection through Splunk Web Manager Configuration in Splunk Enterprise (CVSS 8.8)
• CVE-2026-76316 Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise (CVSS 8.8)
• CVE-2026-76317 Path Traversal through the Lookup Configuration REST API in Splunk Enterprise (CVSS 8.8)
• CVE-2026-76318 Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise (CVSS 5.7)
• CVE-2026-76319 Remote Code Execution (RCE) through Federated Search in Splunk Enterprise (CVSS 8.8)
• CVE-2026-76320 SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise (CVSS 5.9)
• CVE-2026-76321 SPL Injection through Nearby Event Searches in Splunk Enterprise (CVSS 7.3)
• CVE-2026-76322 SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise (CVSS 6.7)
• CVE-2026-76323 SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise (CVSS 6.4)
• CVE-2026-76324 Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise (CVSS 5.7)
• CVE-2026-76325 Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise (CVSS 7.3)
• CVE-2026-76326 Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise (CVSS 5.7)
• CVE-2026-76327 SPL Injection through Splunk Web in Splunk Secure Gateway (CVSS 6.4)
• CVE-2026-76328 SPL Injection through Splunk Web in Splunk Enterprise (CVSS 6.7)
• CVE-2026-76329 SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise (CVSS 6.4)
• CVE-2026-76330 SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise (CVSS 7.1)
• CVE-2026-76331 SPL Injection through the REST API in Splunk Enterprise (CVSS 8.1)
• CVE-2026-76332 SPL Injection through Splunk Web in Splunk Enterprise (CVSS 7.1)
• CVE-2026-76333 Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise (CVSS 7.1)
• CVE-2026-76334 SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise (CVSS 6.4)
• CVE-2026-76335 Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise (CVSS 8.8)
• CVE-2026-76336 Improper Access Control through the REST API in Splunk Enterprise (CVSS 7.1)
• CVE-2026-76337 Path Traversal through Splunk Web Static File Serving in Splunk Enterprise (CVSS 5.3)
• CVE-2026-76338 Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise (CVSS 8.1)
• CVE-2026-76339 SPL Injection through the geostats Command in Splunk Enterprise (CVSS 5.4)
• CVE-2026-76340 Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise (CVSS 5.3)
• CVE-2026-76341 Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise (CVSS 5.4)
• CVE-2026-76342 Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise (CVSS 5.4)
• CVE-2026-76343 Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise (CVSS 6.5)
• CVE-2026-76344 Path Traversal through the Search Dispatch REST API in Splunk Enterprise (CVSS 7.7)
• CVE-2026-76345 Remote Code Execution (RCE) through the REST API in Splunk Enterprise (CVSS 6.0)
• CVE-2026-76346 Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise (CVSS 5.4)
• CVE-2026-76347 Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway (CVSS 5.4)
• CVE-2026-76348 Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise (CVSS 3.8)
• CVE-2026-76349 SPL Injection through Splunk Web Form Tokens in Splunk Enterprise (CVSS 6.4)
• CVE-2026-76350 Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise (CVSS 8.8)
• CVE-2026-76351 Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway (CVSS 8.8)
• CVE-2026-76352 Improper Authorization through the REST API in Splunk Enterprise (CVSS 8.8)
• CVE-2026-76353 Path Traversal through Knowledge Bundle Replication in Splunk Enterprise (CVSS 5.4)
• CVE-2026-76354 Path Traversal through Search Head Clustering in Splunk Enterprise (CVSS 8.1)
• CVE-2026-76355 Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise (CVSS 7.5)
• CVE-2026-76356 Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR (CVSS 8.1)
• CVE-2026-76357 Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR (CVSS 7.6)
• CVE-2026-76358 Path Traversal through App Installation Tar Extraction in Splunk SOAR (CVSS 6.5)
• CVE-2026-76359 Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR (CVSS 6.5)
• CVE-2026-76360 Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR (CVSS 4.3)
• CVE-2026-76361 Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR (CVSS 2.7)
• CVE-2026-76362 Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR (CVSS 7.4)
• CVE-2026-76363 Structured Query Language Injection through the REST API in Splunk SOAR (CVSS 6.5)
• CVE-2026-76364 Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR (CVSS 6.5)
• CVE-2026-76365 Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR (CVSS 6.5)
• CVE-2026-76366 Information Disclosure through the REST API in Splunk SOAR (CVSS 6.5)
• CVE-2026-76367 Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR (CVSS 4.0)
• CVE-2026-76368 Missing Authorization through Playbooks in Splunk SOAR (CVSS 2.7)
• CVE-2026-76369 Path Traversal through Automation Broker in Splunk SOAR (CVSS 2.7)
• CVE-2026-76370 Information Disclosure through the REST API in Splunk SOAR (CVSS 4.3)
• CVE-2026-76371 Incorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOAR (CVSS 2.7)
• CVE-2026-76372 Incorrect Permission Assignment through Safe Mode in Nmap Scanner for Splunk SOAR (CVSS 6.6)
• CVE-2026-76373 Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR (CVSS 5.4)
• CVE-2026-76374 Information Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR (CVSS 4.3)
• CVE-2026-76375 Information Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR (CVSS 5.0)
• CVE-2026-76376 Information Disclosure through Action Parameters in AWS IAM app for Splunk SOAR (CVSS 4.3)
• CVE-2026-76377 Information Disclosure through Action Parameters in Azure AD Graph app for Splunk SOAR (CVSS 4.3)
• CVE-2026-76378 Information Disclosure through Action Parameters in Cisco Secure Malware Analytics app for Splunk SOAR (CVSS 4.3)
• CVE-2026-76379 Information Disclosure through Action Parameters in Cisco Webex app for Splunk SOAR (CVSS 4.3)
• CVE-2026-76380 Information Disclosure through Action Parameters in CrowdStrike OAuth API app for Splunk SOAR (CVSS 4.3)
• CVE-2026-76381 Information Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOAR (CVSS 4.3)
• CVE-2026-76382 Information Disclosure through Action Parameters in Phantom app for Splunk SOAR (CVSS 4.3)
• CVE-2026-76383 Information Disclosure through Action Parameters in RSA SecurID Authentication Manager app for Splunk SOAR (CVSS 4.3)
• CVE-2026-76384 Information Disclosure through Action Parameters in Splunk Attack Analyzer Connector for Splunk SOAR (CVSS 4.3)
• CVE-2026-76385 Information Disclosure through Action Parameters in Venafi app for Splunk SOAR (CVSS 4.3)
• CVE-2026-76386 Information Disclosure through Action Parameters in Zoom app for Splunk SOAR (CVSS 4.3)
• CVE-2026-76387 SPL Injection through the REST API in Splunk Enterprise Security (CVSS 8.1)
• CVE-2026-76388 Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security (CVSS 8.1)
• CVE-2026-76389 Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security Cloud (CVSS 8.8)
• CVE-2026-76390 Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud (CVSS 5.3)
• CVE-2026-76391 Improper Privilege Management through Agent Run History in Splunk AI Toolkit (CVSS 8.3)
• CVE-2026-76392 Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit (CVSS 5.4)
• CVE-2026-76393 Race Condition during Model Upload through the REST API in Splunk AI Toolkit (CVSS 5.9)
• CVE-2026-76394 Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit (CVSS 8.3)
• CVE-2026-76395 Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit (CVSS 8.8)
• CVE-2026-76396 Improper Access Control through Scheduled Searches in Splunk AI Toolkit (CVSS 7.5)
• CVE-2026-76397 Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit (CVSS 8.1)
• CVE-2026-76398 Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit (CVSS 4.3)
• CVE-2026-76399 Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit (CVSS 8.1)
• CVE-2026-76400 Denial of Service (DoS) through the REST API in Splunk Connect for Kafka (CVSS 5.9)
• CVE-2026-76401 Regular Expression Denial of Service (DoS) through the REST API in Splunk Connect for Kafka (CVSS 5.9)
• CVE-2026-76402 Server-Side Request Forgery (SSRF) through the REST API in Splunk Connect for Kafka (CVSS 8.2)
• CVE-2026-76403 Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka (CVSS 7.4)
• CVE-2026-76404 Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server app (CVSS 9.1)
• CVE-2026-76405 Information Disclosure through Cleartext Storage in the App Key Value Store in the Splunk On-Call (VictorOps) app (CVSS 4.3)