SE
Product
Splunk Enterprise
On CISA KEVExploited in the wild
207
CVEs
1
On KEV
9.9
Max CVSS
38
New 30D
Severity mix
Critical 10High 65Medium 126Low 6
Watch
Add Splunk Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-76277 | 4.1 | Oct 7 | Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise Affected: 10.4 before 10.4.3; 10.2 before 10.2.7; 10.0 before 10.0.10; 9.4 before 9.4.15 |
| CVE-2026-76348 | 3.8 | Aug 19 | Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise Affected: 10.4 before 10.4.2; 10.2 before 10.2.6; 10.0 before 10.0.9; 9.4 before 9.4.14 |
| CVE-2025-20379 | 3.5 | Nov 12 | Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprise Affected: 10.0 before 10.0.1; 9.4 before 9.4.5; 9.3 before 9.3.7; 9.2 before 9.2.9 |
| CVE-2024-45737 | 3.5 | Oct 14 | Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF) Affected: 9.3 before 9.3.1; 9.2 before 9.2.3; 9.1 before 9.1.6 |
| CVE-2024-36995 | 3.5 | Jul 1 | Low-privileged user could create experimental items Affected: 9.2 before 9.2.2; 9.1 before 9.1.5; 9.0 before 9.0.10 |
| CVE-2024-23676 | 3.5 | Jan 22 | Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command Affected: 9.0 before 9.0.8; 9.1 before 9.1.3 |
| CVE-2025-20388 | 2.7 | Dec 3 | Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise Affected: 10.0 before 10.0.1; 9.4 before 9.4.6; 9.3 before 9.3.8; 9.2 before 9.2.10 |