Splunk Splunk Enterprise vulnerabilities

CVEs per yearBy the year they were published

1. 202225
2. 202330
3. 202437
4. 202532
5. 2026126

Known exploitedNewest addition to KEV first

• CVE-2026-20253

  Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

  Splunk · Splunk Enterprise

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-76302

  Security Hardening in Splunk Enterprise - October 2026

  Splunk · Splunk Enterprise

  Critical9.9
• CVE-2026-76301

  Security Hardening in Splunk Enterprise - October 2026

  Splunk · Splunk Enterprise

  Critical9.8
• CVE-2026-76300

  Security Hardening in Splunk Enterprise - October 2026

  Splunk · Splunk Enterprise

  High8.8
• CVE-2026-76299

  Security Hardening in Splunk Enterprise - October 2026

  Splunk · Splunk Enterprise

  Critical9.9
• CVE-2026-76298

  Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise

  Splunk · Splunk Enterprise

  High8.8
• CVE-2026-76297

  Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise

  Splunk · Splunk Enterprise

  Medium4.2
• CVE-2026-76296

  Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise

  Splunk · Splunk Enterprise

  Medium4.3
• CVE-2026-76295

  SPL Injection through the REST API in Splunk Secure Gateway

  Splunk · Splunk Enterprise

  Medium4.3
• CVE-2026-76294

  Improper Access Control in Field Extraction Management in Splunk Enterprise

  Splunk · Splunk Enterprise

  Medium4.3
• CVE-2026-76293

  Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise

  Splunk · Splunk Enterprise

  High7.2