Splunk Splunk Cloud Platform vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 202318
3. 202421
4. 202521
5. 202624

Newest CVEs

• CVE-2026-20298

  Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

  Splunk · Splunk Enterprise

  Medium5.3
• CVE-2026-20296

  SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise

  Splunk · Splunk Enterprise

  High8.3
• CVE-2026-20297

  Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise

  Splunk · Splunk Enterprise

  High7.2
• CVE-2026-20258

  Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise

  Splunk · Splunk Enterprise

  High7.1
• CVE-2026-20252

  Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise

  Splunk · Splunk Enterprise

  High7.6
• CVE-2026-20257

  Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise

  Splunk · Splunk Enterprise

  Medium5.7
• CVE-2026-20259

  Improper Access Control in Splunk Enterprise

  Splunk · Splunk Enterprise

  Medium5.5
• CVE-2026-20255

  Improper Input Validation through Classic Dashboards in Splunk Enterprise

  Splunk · Splunk Enterprise

  Medium5.7
• CVE-2026-20251

  Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

  Splunk · Splunk Enterprise

  High8.8
• CVE-2026-20254

  Information Disclosure through External Content Restriction Bypass in Splunk Enterprise

  Splunk · Splunk Enterprise

  Medium5.7