Splunk CVEs
240 vulnerabilities mapped to Splunk’s software or packages, 1 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first. Not a statement that the hosted service was exposed.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. Same list on the all-vendor CVE index.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-76267 Log Injection through the REST API in Splunk App for Splunk O11y Cloud
CVSS 4.3 mediumEPSS 0.22%
CVE-2026-76266 Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise
CVSS 7.7 highEPSS 0.15%
CVE-2026-76265 Improper Access Control through REST API Endpoints in Splunk Secure Gateway
CVSS 6.5 mediumEPSS 0.30%
CVE-2026-76264 Improper Authorization through the REST API in Splunk Enterprise
CVSS 4.3 mediumEPSS 0.22%
CVE-2026-76404 Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server app
CVSS 9.1 criticalEPSS 0.75%
CVE-2026-76400 Denial of Service (DoS) through the REST API in Splunk Connect for Kafka
CVSS 5.9 mediumEPSS 0.38%
CVE-2026-76399 Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit
CVSS 8.1 highEPSS 0.35%
CVE-2026-76396 Improper Access Control through Scheduled Searches in Splunk AI Toolkit
CVSS 7.5 highEPSS 0.32%
CVE-2026-76393 Race Condition during Model Upload through the REST API in Splunk AI Toolkit
CVSS 5.9 mediumEPSS 0.18%
CVE-2026-76392 Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit
CVSS 5.4 mediumEPSS 0.23%
CVE-2026-76391 Improper Privilege Management through Agent Run History in Splunk AI Toolkit
CVSS 8.3 highEPSS 0.47%
CVE-2026-76387 SPL Injection through the REST API in Splunk Enterprise Security
CVSS 8.1 highEPSS 0.40%
CVE-2026-76386 Information Disclosure through Action Parameters in Zoom app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.19%
CVE-2026-76385 Information Disclosure through Action Parameters in Venafi app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.12%
CVE-2026-76382 Information Disclosure through Action Parameters in Phantom app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.19%
CVE-2026-76379 Information Disclosure through Action Parameters in Cisco Webex app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.19%
CVE-2026-76377 Information Disclosure through Action Parameters in Azure AD Graph app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.19%
CVE-2026-76376 Information Disclosure through Action Parameters in AWS IAM app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.19%
CVE-2026-76375 Information Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR
CVSS 5.0 mediumEPSS 0.30%
CVE-2026-76374 Information Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.30%
CVE-2026-76373 Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR
CVSS 5.4 mediumEPSS 0.25%
CVE-2026-76372 Incorrect Permission Assignment through Safe Mode in Nmap Scanner for Splunk SOAR
CVSS 6.6 mediumEPSS 0.43%
CVE-2026-76371 Incorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOAR
CVSS 2.7 lowEPSS 0.28%
CVE-2026-76370 Information Disclosure through the REST API in Splunk SOAR
CVSS 4.3 mediumEPSS 0.27%
CVE-2026-76369 Path Traversal through Automation Broker in Splunk SOAR
CVSS 2.7 lowEPSS 0.35%
CVE-2026-76368 Missing Authorization through Playbooks in Splunk SOAR
CVSS 2.7 lowEPSS 0.30%
CVE-2026-76367 Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR
CVSS 4.0 mediumEPSS 0.20%
CVE-2026-76366 Information Disclosure through the REST API in Splunk SOAR
CVSS 6.5 mediumEPSS 0.39%
CVE-2026-76365 Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR
CVSS 6.5 mediumEPSS 0.40%
CVE-2026-76364 Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR
CVSS 6.5 mediumEPSS 0.40%
CVE-2026-76363 Structured Query Language Injection through the REST API in Splunk SOAR
CVSS 6.5 mediumEPSS 0.41%
CVE-2026-76360 Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR
CVSS 4.3 mediumEPSS 0.27%
All vendors’ CVEs · JSON · Markdown
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)