# Splunk in October 2026: incidents, uptime and changes

> Splunk in October 2026: 0 incidents on its status page (0 major or critical), 100% free of major or critical incidents (vendor-reported), 2 pricing/legal/trust page changes, 54 CVEs. From Rewindex’s archive of Splunk’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/splunk/2026/10
Last updated: 2026-11-02T21:17:39Z

- Incidents posted: 0 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none
- Uptime (vendor-reported): 100% free of major/critical incidents, 100% free of any incident; outage time 0 min, incident time 0 min
- Price changes: 0 · Pricing/legal/trust page changes: 2 · Deprecations: 0 · CVEs: 54
- Previous month: [August 2026](https://rewindex.com/company/splunk/2026/08.md) · Next: none · [All months](https://rewindex.com/company/splunk/reports.md) · [Splunk](https://rewindex.com/company/splunk.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

_No incidents posted this month._

## Pricing, legal and trust page changes

- 2026-10-21 08:44 UTC: [Trust page changed](https://rewindex.com/change/p4403.md) (Trust / security: Trust page)
- 2026-10-23 08:44 UTC: [Trust page changed](https://rewindex.com/change/p6083.md) (Trust / security: Trust page)

## CVEs published

- [CVE-2026-76264](https://rewindex.com/cve/CVE-2026-76264.md) Improper Authorization through the REST API in Splunk Enterprise (CVSS 4.3), published 2026-10-07
- [CVE-2026-76265](https://rewindex.com/cve/CVE-2026-76265.md) Improper Access Control through REST API Endpoints in Splunk Secure Gateway (CVSS 6.5), published 2026-10-07
- [CVE-2026-76266](https://rewindex.com/cve/CVE-2026-76266.md) Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise (CVSS 7.7), published 2026-10-07
- [CVE-2026-76267](https://rewindex.com/cve/CVE-2026-76267.md) Log Injection through the REST API in Splunk App for Splunk O11y Cloud (CVSS 4.3), published 2026-10-07
- [CVE-2026-76268](https://rewindex.com/cve/CVE-2026-76268.md) Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise (CVSS 9.8), published 2026-10-07
- [CVE-2026-76269](https://rewindex.com/cve/CVE-2026-76269.md) Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise (CVSS 6.5), published 2026-10-07
- [CVE-2026-76270](https://rewindex.com/cve/CVE-2026-76270.md) Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise (CVSS 6.5), published 2026-10-07
- [CVE-2026-76271](https://rewindex.com/cve/CVE-2026-76271.md) Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise (CVSS 6.5), published 2026-10-07
- [CVE-2026-76272](https://rewindex.com/cve/CVE-2026-76272.md) Missing Access Control through the REST API in Splunk Secure Gateway (CVSS 4.3), published 2026-10-07
- [CVE-2026-76273](https://rewindex.com/cve/CVE-2026-76273.md) Improper Input Validation through the collect Command in Splunk Enterprise (CVSS 4.3), published 2026-10-07
- [CVE-2026-76274](https://rewindex.com/cve/CVE-2026-76274.md) Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud (CVSS 6.5), published 2026-10-07
- [CVE-2026-76275](https://rewindex.com/cve/CVE-2026-76275.md) Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise (CVSS 4.3), published 2026-10-07
- [CVE-2026-76276](https://rewindex.com/cve/CVE-2026-76276.md) Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise (CVSS 4.3), published 2026-10-07
- [CVE-2026-76277](https://rewindex.com/cve/CVE-2026-76277.md) Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise (CVSS 4.1), published 2026-10-07
- [CVE-2026-76278](https://rewindex.com/cve/CVE-2026-76278.md) Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise (CVSS 4.3), published 2026-10-07
- [CVE-2026-76279](https://rewindex.com/cve/CVE-2026-76279.md) Improper Input Validation of Index Names through the collect Command in Splunk Enterprise (CVSS 4.3), published 2026-10-07
- [CVE-2026-76280](https://rewindex.com/cve/CVE-2026-76280.md) Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway (CVSS 6.3), published 2026-10-07
- [CVE-2026-76281](https://rewindex.com/cve/CVE-2026-76281.md) Improper Access Control in Splunk Enterprise (not scored), published 2026-10-07
- [CVE-2026-76282](https://rewindex.com/cve/CVE-2026-76282.md) Improper Control of a Resource Through its Lifetime in Splunk Enterprise (CVSS 8.8), published 2026-10-07
- [CVE-2026-76283](https://rewindex.com/cve/CVE-2026-76283.md) Protection Mechanism Failure in Splunk Enterprise (CVSS 7.6), published 2026-10-07
- [CVE-2026-76284](https://rewindex.com/cve/CVE-2026-76284.md) Improper Neutralization in Splunk Enterprise (CVSS 9.8), published 2026-10-07
- [CVE-2026-76285](https://rewindex.com/cve/CVE-2026-76285.md) Improper Adherence to Coding Standards in Splunk Enterprise (CVSS 9.8), published 2026-10-07
- [CVE-2026-76286](https://rewindex.com/cve/CVE-2026-76286.md) Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server (CVSS 5.3), published 2026-10-07
- [CVE-2026-76287](https://rewindex.com/cve/CVE-2026-76287.md) Authorization Bypass in the Data Management REST API in Splunk Enterprise (CVSS 5.4), published 2026-10-21
- [CVE-2026-76288](https://rewindex.com/cve/CVE-2026-76288.md) Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise (CVSS 7.5), published 2026-10-21
- [CVE-2026-76289](https://rewindex.com/cve/CVE-2026-76289.md) Denial of Service (DoS) through the REST API in Splunk Enterprise (CVSS 6.5), published 2026-10-21
- [CVE-2026-76290](https://rewindex.com/cve/CVE-2026-76290.md) Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise (CVSS 7.5), published 2026-10-21
- [CVE-2026-76291](https://rewindex.com/cve/CVE-2026-76291.md) Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise (CVSS 8.8), published 2026-10-21
- [CVE-2026-76292](https://rewindex.com/cve/CVE-2026-76292.md) Missing Authorization through REST API Endpoints in Splunk Secure Gateway (CVSS 6.5), published 2026-10-21
- [CVE-2026-76293](https://rewindex.com/cve/CVE-2026-76293.md) Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise (CVSS 7.2), published 2026-10-21
- [CVE-2026-76294](https://rewindex.com/cve/CVE-2026-76294.md) Improper Access Control in Field Extraction Management in Splunk Enterprise (CVSS 4.3), published 2026-10-21
- [CVE-2026-76295](https://rewindex.com/cve/CVE-2026-76295.md) SPL Injection through the REST API in Splunk Secure Gateway (CVSS 4.3), published 2026-10-21
- [CVE-2026-76296](https://rewindex.com/cve/CVE-2026-76296.md) Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise (CVSS 4.3), published 2026-10-21
- [CVE-2026-76297](https://rewindex.com/cve/CVE-2026-76297.md) Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise (CVSS 4.2), published 2026-10-21
- [CVE-2026-76298](https://rewindex.com/cve/CVE-2026-76298.md) Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise (CVSS 8.8), published 2026-10-21
- [CVE-2026-76299](https://rewindex.com/cve/CVE-2026-76299.md) Security Hardening in Splunk Enterprise - October 2026 (CVSS 9.9), published 2026-10-21
- [CVE-2026-76300](https://rewindex.com/cve/CVE-2026-76300.md) Security Hardening in Splunk Enterprise - October 2026 (CVSS 8.8), published 2026-10-21
- [CVE-2026-76301](https://rewindex.com/cve/CVE-2026-76301.md) Security Hardening in Splunk Enterprise - October 2026 (CVSS 9.8), published 2026-10-21
- [CVE-2026-76302](https://rewindex.com/cve/CVE-2026-76302.md) Security Hardening in Splunk Enterprise - October 2026 (CVSS 9.9), published 2026-10-21
- [CVE-2026-76303](https://rewindex.com/cve/CVE-2026-76303.md) Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR (CVSS 5.7), published 2026-10-21
- [CVE-2026-76304](https://rewindex.com/cve/CVE-2026-76304.md) Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR (CVSS 4.3), published 2026-10-21
- [CVE-2026-76305](https://rewindex.com/cve/CVE-2026-76305.md) Improper Access Control during App Downloads in Splunk SOAR (CVSS 6.5), published 2026-10-21
- [CVE-2026-76306](https://rewindex.com/cve/CVE-2026-76306.md) Information Disclosure through REST API Query Filters in Splunk SOAR (CVSS 7.5), published 2026-10-21
- [CVE-2026-76307](https://rewindex.com/cve/CVE-2026-76307.md) Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR (CVSS 7.2), published 2026-10-21
- [CVE-2026-76308](https://rewindex.com/cve/CVE-2026-76308.md) Missing Authorization through the REST API in Splunk SOAR (CVSS 6.5), published 2026-10-21
- [CVE-2026-76406](https://rewindex.com/cve/CVE-2026-76406.md) Information Disclosure through REST API Authentication in Splunk SOAR (CVSS 5.9), published 2026-10-21
- [CVE-2026-76407](https://rewindex.com/cve/CVE-2026-76407.md) Improper Access Control in Splunk SOAR (CVSS 9.8), published 2026-10-21
- [CVE-2026-76408](https://rewindex.com/cve/CVE-2026-76408.md) Improper Control of a Resource Through its Lifetime in Splunk SOAR (CVSS 9.8), published 2026-10-21
- [CVE-2026-76526](https://rewindex.com/cve/CVE-2026-76526.md) Improper Neutralization in Splunk SOAR (CVSS 8.8), published 2026-10-21
- [CVE-2026-76527](https://rewindex.com/cve/CVE-2026-76527.md) Improper Check or Handling of Exceptional Conditions in Splunk SOAR (CVSS 9.8), published 2026-10-21
- [CVE-2026-76528](https://rewindex.com/cve/CVE-2026-76528.md) Protection Mechanism Failure in Splunk SOAR (CVSS 9.8), published 2026-10-21
- [CVE-2026-76529](https://rewindex.com/cve/CVE-2026-76529.md) Improper Protection of Alternate Path in Splunk SOAR (CVSS 9.8), published 2026-10-21
- [CVE-2026-76530](https://rewindex.com/cve/CVE-2026-76530.md) Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR (CVSS 8.8), published 2026-10-21
- [CVE-2026-76531](https://rewindex.com/cve/CVE-2026-76531.md) Files or Directories Accessible to External Parties in Splunk SOAR (CVSS 9.9), published 2026-10-21

## Cite this

Splunk posted 0 status incidents in October 2026 (0 major or critical); 0 price changes and 2 notable page changes observed.

- Canonical URL: https://rewindex.com/company/splunk/2026/10
- Citation: Splunk, “Splunk in October 2026” (2026-10-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/splunk/2026/10 (CC BY 4.0).
- Markdown link: `[Splunk: Splunk in October 2026 (2026-10-01)](https://rewindex.com/company/splunk/2026/10)`


---
Canonical: https://rewindex.com/company/splunk/2026/10 · Markdown: https://rewindex.com/company/splunk/2026/10.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T15:02:00.951Z