CVEs for Splunk
240 matching vulnerabilities, 1 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-76267 Log Injection through the REST API in Splunk App for Splunk O11y Cloud
CVSS 4.3 mediumEPSS 0.22%Splunk
CVE-2026-76265 Improper Access Control through REST API Endpoints in Splunk Secure Gateway
CVSS 6.5 mediumEPSS 0.30%Splunk
CVE-2026-76264 Improper Authorization through the REST API in Splunk Enterprise
CVSS 4.3 mediumEPSS 0.22%Splunk
CVE-2026-76400 Denial of Service (DoS) through the REST API in Splunk Connect for Kafka
CVSS 5.9 mediumEPSS 0.38%Splunk
CVE-2026-76399 Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit
CVSS 8.1 highEPSS 0.35%Splunk
CVE-2026-76396 Improper Access Control through Scheduled Searches in Splunk AI Toolkit
CVSS 7.5 highEPSS 0.32%Splunk
CVE-2026-76393 Race Condition during Model Upload through the REST API in Splunk AI Toolkit
CVSS 5.9 mediumEPSS 0.18%Splunk
CVE-2026-76392 Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit
CVSS 5.4 mediumEPSS 0.23%Splunk
CVE-2026-76391 Improper Privilege Management through Agent Run History in Splunk AI Toolkit
CVSS 8.3 highEPSS 0.47%Splunk
CVE-2026-76387 SPL Injection through the REST API in Splunk Enterprise Security
CVSS 8.1 highEPSS 0.40%Splunk
CVE-2026-76386 Information Disclosure through Action Parameters in Zoom app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.19%Splunk
CVE-2026-76385 Information Disclosure through Action Parameters in Venafi app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.12%Splunk
CVE-2026-76382 Information Disclosure through Action Parameters in Phantom app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.19%Splunk
CVE-2026-76379 Information Disclosure through Action Parameters in Cisco Webex app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.19%Splunk
CVE-2026-76376 Information Disclosure through Action Parameters in AWS IAM app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.19%Splunk
CVE-2026-76374 Information Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.30%Splunk
CVE-2026-76373 Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR
CVSS 5.4 mediumEPSS 0.25%Splunk
CVE-2026-76372 Incorrect Permission Assignment through Safe Mode in Nmap Scanner for Splunk SOAR
CVSS 6.6 mediumEPSS 0.43%Splunk
CVE-2026-76370 Information Disclosure through the REST API in Splunk SOAR
CVSS 4.3 mediumEPSS 0.27%Splunk
CVE-2026-76369 Path Traversal through Automation Broker in Splunk SOAR
CVSS 2.7 lowEPSS 0.35%Splunk
CVE-2026-76368 Missing Authorization through Playbooks in Splunk SOAR
CVSS 2.7 lowEPSS 0.30%Splunk
CVE-2026-76367 Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR
CVSS 4.0 mediumEPSS 0.20%Splunk
CVE-2026-76366 Information Disclosure through the REST API in Splunk SOAR
CVSS 6.5 mediumEPSS 0.39%Splunk
CVE-2026-76365 Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR
CVSS 6.5 mediumEPSS 0.40%Splunk
CVE-2026-76363 Structured Query Language Injection through the REST API in Splunk SOAR
CVSS 6.5 mediumEPSS 0.41%Splunk
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)