Splunk Splunk MCP Server vulnerabilities

3 published CVEs name Splunk Splunk MCP Server among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 3
Critical: 0
Known exploited: 0

Critical 0High 1Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

20251
20262

Newest CVEs

CVE-2026-76286
Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server
Splunk · Splunk MCP Server
Medium5.3
CVE-2026-20205
Sensitive Information Disclosure in ''_internal'' index in Splunk MCP Server app
Splunk · Splunk MCP Server
High7.2
CVE-2025-20381
SPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP tool
Splunk · Splunk MCP Server
Medium5.4

Most common weaknesses