Splunk in October 2026: incidents, uptime and changes

Incidents 0

Splunk posted no incidents in October 2026.

Pricing, legal and trust page changes

• Oct 21 Trust page changed Trust / securityTrust page
• Oct 23 Trust page changed Trust / securityTrust page

CVEs published

• CVE-2026-76264 Improper Authorization through the REST API in Splunk Enterprise (CVSS 4.3)
• CVE-2026-76265 Improper Access Control through REST API Endpoints in Splunk Secure Gateway (CVSS 6.5)
• CVE-2026-76266 Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise (CVSS 7.7)
• CVE-2026-76267 Log Injection through the REST API in Splunk App for Splunk O11y Cloud (CVSS 4.3)
• CVE-2026-76268 Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise (CVSS 9.8)
• CVE-2026-76269 Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise (CVSS 6.5)
• CVE-2026-76270 Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise (CVSS 6.5)
• CVE-2026-76271 Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise (CVSS 6.5)
• CVE-2026-76272 Missing Access Control through the REST API in Splunk Secure Gateway (CVSS 4.3)
• CVE-2026-76273 Improper Input Validation through the collect Command in Splunk Enterprise (CVSS 4.3)
• CVE-2026-76274 Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud (CVSS 6.5)
• CVE-2026-76275 Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise (CVSS 4.3)
• CVE-2026-76276 Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise (CVSS 4.3)
• CVE-2026-76277 Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise (CVSS 4.1)
• CVE-2026-76278 Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise (CVSS 4.3)
• CVE-2026-76279 Improper Input Validation of Index Names through the collect Command in Splunk Enterprise (CVSS 4.3)
• CVE-2026-76280 Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway (CVSS 6.3)
• CVE-2026-76281 Improper Access Control in Splunk Enterprise (not scored)
• CVE-2026-76282 Improper Control of a Resource Through its Lifetime in Splunk Enterprise (CVSS 8.8)
• CVE-2026-76283 Protection Mechanism Failure in Splunk Enterprise (CVSS 7.6)
• CVE-2026-76284 Improper Neutralization in Splunk Enterprise (CVSS 9.8)
• CVE-2026-76285 Improper Adherence to Coding Standards in Splunk Enterprise (CVSS 9.8)
• CVE-2026-76286 Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server (CVSS 5.3)
• CVE-2026-76287 Authorization Bypass in the Data Management REST API in Splunk Enterprise (CVSS 5.4)
• CVE-2026-76288 Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise (CVSS 7.5)
• CVE-2026-76289 Denial of Service (DoS) through the REST API in Splunk Enterprise (CVSS 6.5)
• CVE-2026-76290 Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise (CVSS 7.5)
• CVE-2026-76291 Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise (CVSS 8.8)
• CVE-2026-76292 Missing Authorization through REST API Endpoints in Splunk Secure Gateway (CVSS 6.5)
• CVE-2026-76293 Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise (CVSS 7.2)
• CVE-2026-76294 Improper Access Control in Field Extraction Management in Splunk Enterprise (CVSS 4.3)
• CVE-2026-76295 SPL Injection through the REST API in Splunk Secure Gateway (CVSS 4.3)
• CVE-2026-76296 Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise (CVSS 4.3)
• CVE-2026-76297 Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise (CVSS 4.2)
• CVE-2026-76298 Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise (CVSS 8.8)
• CVE-2026-76299 Security Hardening in Splunk Enterprise - October 2026 (CVSS 9.9)
• CVE-2026-76300 Security Hardening in Splunk Enterprise - October 2026 (CVSS 8.8)
• CVE-2026-76301 Security Hardening in Splunk Enterprise - October 2026 (CVSS 9.8)
• CVE-2026-76302 Security Hardening in Splunk Enterprise - October 2026 (CVSS 9.9)
• CVE-2026-76303 Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR (CVSS 5.7)
• CVE-2026-76304 Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR (CVSS 4.3)
• CVE-2026-76305 Improper Access Control during App Downloads in Splunk SOAR (CVSS 6.5)
• CVE-2026-76306 Information Disclosure through REST API Query Filters in Splunk SOAR (CVSS 7.5)
• CVE-2026-76307 Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR (CVSS 7.2)
• CVE-2026-76308 Missing Authorization through the REST API in Splunk SOAR (CVSS 6.5)
• CVE-2026-76406 Information Disclosure through REST API Authentication in Splunk SOAR (CVSS 5.9)
• CVE-2026-76407 Improper Access Control in Splunk SOAR (CVSS 9.8)
• CVE-2026-76408 Improper Control of a Resource Through its Lifetime in Splunk SOAR (CVSS 9.8)
• CVE-2026-76526 Improper Neutralization in Splunk SOAR (CVSS 8.8)
• CVE-2026-76527 Improper Check or Handling of Exceptional Conditions in Splunk SOAR (CVSS 9.8)
• CVE-2026-76528 Protection Mechanism Failure in Splunk SOAR (CVSS 9.8)
• CVE-2026-76529 Improper Protection of Alternate Path in Splunk SOAR (CVSS 9.8)
• CVE-2026-76530 Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR (CVSS 8.8)
• CVE-2026-76531 Files or Directories Accessible to External Parties in Splunk SOAR (CVSS 9.9)