# Splunk CVEs > Splunk: 240 CVEs mapped to its software or packages (1 in CISA KEV), newest first, with CVSS and EPSS. Canonical: https://rewindex.com/company/splunk/cves Last updated: 2026-10-21T22:52:20Z 240 CVEs map to Splunk (1 in CISA KEV), newest first. Page 1. Query: `?sev=critical|high|medium|low&kev=yes|no&min_cvss=0..10&q=&page=N`. Company profile: [Splunk](https://rewindex.com/company/splunk.md) Scope: CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. A mapped CVE is not a statement that Splunk’s hosted service was exposed. | Published (UTC) | CVE | Title | CVSS | KEV | | --- | --- | --- | --- | --- | | 2026-10-21 | [CVE-2026-76531](https://rewindex.com/cve/CVE-2026-76531.md) | Files or Directories Accessible to External Parties in Splunk SOAR | 9.9 critical | | | 2026-10-21 | [CVE-2026-76530](https://rewindex.com/cve/CVE-2026-76530.md) | Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR | 8.8 high | | | 2026-10-21 | [CVE-2026-76529](https://rewindex.com/cve/CVE-2026-76529.md) | Improper Protection of Alternate Path in Splunk SOAR | n/a | | | 2026-10-21 | [CVE-2026-76528](https://rewindex.com/cve/CVE-2026-76528.md) | Protection Mechanism Failure in Splunk SOAR | n/a | | | 2026-10-21 | [CVE-2026-76527](https://rewindex.com/cve/CVE-2026-76527.md) | Improper Check or Handling of Exceptional Conditions in Splunk SOAR | n/a | | | 2026-10-21 | [CVE-2026-76526](https://rewindex.com/cve/CVE-2026-76526.md) | Improper Neutralization in Splunk SOAR | n/a | | | 2026-10-21 | [CVE-2026-76408](https://rewindex.com/cve/CVE-2026-76408.md) | Improper Control of a Resource Through its Lifetime in Splunk SOAR | n/a | | | 2026-10-21 | [CVE-2026-76407](https://rewindex.com/cve/CVE-2026-76407.md) | Improper Access Control in Splunk SOAR | n/a | | | 2026-10-21 | [CVE-2026-76406](https://rewindex.com/cve/CVE-2026-76406.md) | Information Disclosure through REST API Authentication in Splunk SOAR | 5.9 medium | | | 2026-10-21 | [CVE-2026-76308](https://rewindex.com/cve/CVE-2026-76308.md) | Missing Authorization through the REST API in Splunk SOAR | 6.5 medium | | | 2026-10-21 | [CVE-2026-76307](https://rewindex.com/cve/CVE-2026-76307.md) | Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR | 7.2 high | | | 2026-10-21 | [CVE-2026-76306](https://rewindex.com/cve/CVE-2026-76306.md) | Information Disclosure through REST API Query Filters in Splunk SOAR | 7.5 high | | | 2026-10-21 | [CVE-2026-76305](https://rewindex.com/cve/CVE-2026-76305.md) | Improper Access Control during App Downloads in Splunk SOAR | 6.5 medium | | | 2026-10-21 | [CVE-2026-76304](https://rewindex.com/cve/CVE-2026-76304.md) | Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR | 4.3 medium | | | 2026-10-21 | [CVE-2026-76303](https://rewindex.com/cve/CVE-2026-76303.md) | Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR | 5.7 medium | | | 2026-10-21 | [CVE-2026-76302](https://rewindex.com/cve/CVE-2026-76302.md) | Security Hardening in Splunk Enterprise - October 2026 | 9.9 critical | | | 2026-10-21 | [CVE-2026-76301](https://rewindex.com/cve/CVE-2026-76301.md) | Security Hardening in Splunk Enterprise - October 2026 | n/a | | | 2026-10-21 | [CVE-2026-76300](https://rewindex.com/cve/CVE-2026-76300.md) | Security Hardening in Splunk Enterprise - October 2026 | n/a | | | 2026-10-21 | [CVE-2026-76299](https://rewindex.com/cve/CVE-2026-76299.md) | Security Hardening in Splunk Enterprise - October 2026 | 9.9 critical | | | 2026-10-21 | [CVE-2026-76298](https://rewindex.com/cve/CVE-2026-76298.md) | Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise | 8.8 high | | | 2026-10-21 | [CVE-2026-76297](https://rewindex.com/cve/CVE-2026-76297.md) | Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise | 4.2 medium | | | 2026-10-21 | [CVE-2026-76296](https://rewindex.com/cve/CVE-2026-76296.md) | Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise | 4.3 medium | | | 2026-10-21 | [CVE-2026-76295](https://rewindex.com/cve/CVE-2026-76295.md) | SPL Injection through the REST API in Splunk Secure Gateway | 4.3 medium | | | 2026-10-21 | [CVE-2026-76294](https://rewindex.com/cve/CVE-2026-76294.md) | Improper Access Control in Field Extraction Management in Splunk Enterprise | 4.3 medium | | | 2026-10-21 | [CVE-2026-76293](https://rewindex.com/cve/CVE-2026-76293.md) | Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise | 7.2 high | | | 2026-10-21 | [CVE-2026-76292](https://rewindex.com/cve/CVE-2026-76292.md) | Missing Authorization through REST API Endpoints in Splunk Secure Gateway | 6.5 medium | | | 2026-10-21 | [CVE-2026-76291](https://rewindex.com/cve/CVE-2026-76291.md) | Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise | 8.8 high | | | 2026-10-21 | [CVE-2026-76290](https://rewindex.com/cve/CVE-2026-76290.md) | Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise | 7.5 high | | | 2026-10-21 | [CVE-2026-76289](https://rewindex.com/cve/CVE-2026-76289.md) | Denial of Service (DoS) through the REST API in Splunk Enterprise | 6.5 medium | | | 2026-10-21 | [CVE-2026-76288](https://rewindex.com/cve/CVE-2026-76288.md) | Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise | 7.5 high | | | 2026-10-21 | [CVE-2026-76287](https://rewindex.com/cve/CVE-2026-76287.md) | Authorization Bypass in the Data Management REST API in Splunk Enterprise | 5.4 medium | | | 2026-10-07 | [CVE-2026-76286](https://rewindex.com/cve/CVE-2026-76286.md) | Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server | 5.3 medium | | | 2026-10-07 | [CVE-2026-76285](https://rewindex.com/cve/CVE-2026-76285.md) | Improper Adherence to Coding Standards in Splunk Enterprise | 9.8 critical | | | 2026-10-07 | [CVE-2026-76284](https://rewindex.com/cve/CVE-2026-76284.md) | Improper Neutralization in Splunk Enterprise | 9.8 critical | | | 2026-10-07 | [CVE-2026-76283](https://rewindex.com/cve/CVE-2026-76283.md) | Protection Mechanism Failure in Splunk Enterprise | 7.6 high | | | 2026-10-07 | [CVE-2026-76282](https://rewindex.com/cve/CVE-2026-76282.md) | Improper Control of a Resource Through its Lifetime in Splunk Enterprise | 8.8 high | | | 2026-10-07 | [CVE-2026-76281](https://rewindex.com/cve/CVE-2026-76281.md) | Improper Access Control in Splunk Enterprise | 5.3 medium | | | 2026-10-07 | [CVE-2026-76280](https://rewindex.com/cve/CVE-2026-76280.md) | Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway | 6.3 medium | | | 2026-10-07 | [CVE-2026-76279](https://rewindex.com/cve/CVE-2026-76279.md) | Improper Input Validation of Index Names through the collect Command in Splunk Enterprise | 4.3 medium | | | 2026-10-07 | [CVE-2026-76278](https://rewindex.com/cve/CVE-2026-76278.md) | Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise | 4.3 medium | | | 2026-10-07 | [CVE-2026-76277](https://rewindex.com/cve/CVE-2026-76277.md) | Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise | 4.1 medium | | | 2026-10-07 | [CVE-2026-76276](https://rewindex.com/cve/CVE-2026-76276.md) | Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise | 4.3 medium | | | 2026-10-07 | [CVE-2026-76275](https://rewindex.com/cve/CVE-2026-76275.md) | Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise | 4.3 medium | | | 2026-10-07 | [CVE-2026-76274](https://rewindex.com/cve/CVE-2026-76274.md) | Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud | 6.5 medium | | | 2026-10-07 | [CVE-2026-76273](https://rewindex.com/cve/CVE-2026-76273.md) | Improper Input Validation through the collect Command in Splunk Enterprise | 4.3 medium | | | 2026-10-07 | [CVE-2026-76272](https://rewindex.com/cve/CVE-2026-76272.md) | Missing Access Control through the REST API in Splunk Secure Gateway | 4.3 medium | | | 2026-10-07 | [CVE-2026-76271](https://rewindex.com/cve/CVE-2026-76271.md) | Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise | 6.5 medium | | | 2026-10-07 | [CVE-2026-76270](https://rewindex.com/cve/CVE-2026-76270.md) | Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise | 6.5 medium | | | 2026-10-07 | [CVE-2026-76269](https://rewindex.com/cve/CVE-2026-76269.md) | Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise | 6.5 medium | | | 2026-10-07 | [CVE-2026-76268](https://rewindex.com/cve/CVE-2026-76268.md) | Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise | 9.8 critical | | Next page: [page 2](https://rewindex.com/company/splunk/cves.md?page=2) --- _Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_ ## Charts ### Chart data: CVEs per week, last 52 weeks (Splunk) Weeks start Monday, UTC. Bars: CVEs by published date (KEV date added if unpublished), by CVSS severity; kev_added: entries added to CISA KEV that week. Same filters as the list. The current week is partial. | Week of (UTC) | Critical | High | Medium | Low | Not scored | Added to KEV | | --- | --- | --- | --- | --- | --- | --- | | 2025-11-03 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-11-10 | 0 | 0 | 0 | 2 | 0 | 0 | | 2025-11-17 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-11-24 | 0 | 0 | 0 | 1 | 0 | 0 | | 2025-12-01 | 0 | 2 | 4 | 3 | 0 | 0 | | 2025-12-08 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-15 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-22 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-29 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-05 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-12 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-19 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-26 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-02 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-09 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-16 | 0 | 0 | 5 | 1 | 0 | 0 | | 2026-02-23 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-02 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-09 | 0 | 1 | 4 | 0 | 0 | 0 | | 2026-03-16 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-23 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-30 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-06 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-13 | 0 | 2 | 2 | 0 | 0 | 0 | | 2026-04-20 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-27 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-04 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-11 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-18 | 0 | 2 | 1 | 0 | 0 | 0 | | 2026-05-25 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-01 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-08 | 1 | 3 | 6 | 0 | 0 | 0 | | 2026-06-15 | 1 | 0 | 1 | 0 | 0 | 1 | | 2026-06-22 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-29 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-07-06 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-07-13 | 0 | 2 | 1 | 0 | 0 | 0 | | 2026-07-20 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-07-27 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-08-03 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-08-10 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-08-17 | 4 | 40 | 61 | 5 | 0 | 0 | | 2026-08-24 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-08-31 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-07 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-14 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-21 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-28 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-10-05 | 3 | 3 | 17 | 0 | 0 | 0 | | 2026-10-12 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-10-19 | 3 | 8 | 12 | 0 | 8 | 0 | | 2026-10-26 | 0 | 0 | 0 | 0 | 0 | 0 | --- Canonical: https://rewindex.com/company/splunk/cves · Markdown: https://rewindex.com/company/splunk/cves.md · JSON: https://rewindex.com/api/v1/companies/splunk/cves · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T02:02:34.643Z