Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

Security Hardening in Splunk Enterprise - October 2026

Security Hardening in Splunk Enterprise - October 2026

Security Hardening in Splunk Enterprise - October 2026

Improper Adherence to Coding Standards in Splunk Enterprise

Improper Neutralization in Splunk Enterprise

Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise

Improper Access Control through Embedded Reports in Splunk Enterprise

Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise

Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise

Security Hardening in Splunk Enterprise - October 2026

Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise

Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise

Improper Control of a Resource Through its Lifetime in Splunk Enterprise

Improper Authorization through the REST API in Splunk Enterprise

Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway

Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise

Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise

Remote Code Execution (RCE) through Federated Search in Splunk Enterprise

Path Traversal through the Lookup Configuration REST API in Splunk Enterprise

Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise

Code Injection through Splunk Web Manager Configuration in Splunk Enterprise

Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise

Remote Code Execution (RCE) through the REST API in Splunk Enterprise

SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise

Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise

Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise

Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app

Remote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows

Remote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise

Remote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows

Command Injection using External Lookups

Deserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition

Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing

Absolute Path Traversal in Splunk Enterprise Using runshellscript.py

Splunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL

Remote Code Execution via Serialized Session Payload

Command Injection in Splunk Enterprise Using External Lookups

‘edit_user’ Capability Privilege Escalation

HTTP Response Splitting via the ‘rest’ SPL Command

Remote Code Execution via the Splunk Secure Gateway application Mobile Alerts feature

Risky command safeguards bypass via ‘tstats command JSON in Splunk Enterprise

Risky command safeguards bypass via rex search command field names in Splunk Enterprise

Remote Code Execution through dashboard PDF generation component in Splunk Enterprise

SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise

Path Traversal through Search Head Clustering in Splunk Enterprise

Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise

SPL Injection through the REST API in Splunk Enterprise

Persistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint