Splunk vulnerabilities

CVEs per yearBy the year they were published

1. 202220
2. 20225
3. 202439
4. 202438
5. 202538
6. 2026197

Known exploitedNewest addition to KEV first

• CVE-2026-20253

  Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

  Splunk · Splunk Enterprise

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-76531

  Files or Directories Accessible to External Parties in Splunk SOAR

  Splunk · Splunk SOAR

  Critical9.9
• CVE-2026-76530

  Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR

  Splunk · Splunk SOAR

  High8.8
• CVE-2026-76529

  Improper Protection of Alternate Path in Splunk SOAR

  Splunk · Splunk SOAR

  Critical9.8
• CVE-2026-76528

  Protection Mechanism Failure in Splunk SOAR

  Splunk · Splunk SOAR

  Critical9.8
• CVE-2026-76527

  Improper Check or Handling of Exceptional Conditions in Splunk SOAR

  Splunk · Splunk SOAR

  Critical9.8
• CVE-2026-76526

  Improper Neutralization in Splunk SOAR

  Splunk · Splunk SOAR

  High8.8
• CVE-2026-76408

  Improper Control of a Resource Through its Lifetime in Splunk SOAR

  Splunk · Splunk SOAR

  Critical9.8
• CVE-2026-76407

  Improper Access Control in Splunk SOAR

  Splunk · Splunk SOAR

  Critical9.8
• CVE-2026-76406

  Information Disclosure through REST API Authentication in Splunk SOAR

  Splunk · Splunk SOAR

  Medium5.9
• CVE-2026-76308

  Missing Authorization through the REST API in Splunk SOAR

  Splunk · Splunk SOAR

  Medium6.5