# Splunk Enterprise. Every CVE that names Splunk Enterprise among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Security Hardening in Splunk Enterprise - October 2026](https://agentprime.io/advisories/CVE-2026-76302.md) `CVE-2026-76302` · CVE record: Splunk Splunk Enterprise · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-707 - [Security Hardening in Splunk Enterprise - October 2026](https://agentprime.io/advisories/CVE-2026-76301.md) `CVE-2026-76301` · CVE record: Splunk Splunk Enterprise · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-693 - [Security Hardening in Splunk Enterprise - October 2026](https://agentprime.io/advisories/CVE-2026-76300.md) `CVE-2026-76300` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-664 - [Security Hardening in Splunk Enterprise - October 2026](https://agentprime.io/advisories/CVE-2026-76299.md) `CVE-2026-76299` · CVE record: Splunk Splunk Enterprise · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Broken access control - [Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76298.md) `CVE-2026-76298` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Hard-coded credentials - [Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76297.md) `CVE-2026-76297` · CVE record: Splunk Splunk Enterprise · CVSS 4.2 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Cross-site request forgery (CSRF) - [Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76296.md) `CVE-2026-76296` · CVE record: Splunk Splunk Enterprise · CVSS 4.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Broken access control - [SPL Injection through the REST API in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76295.md) `CVE-2026-76295` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection - [Improper Access Control in Field Extraction Management in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76294.md) `CVE-2026-76294` · CVE record: Splunk Splunk Enterprise · CVSS 4.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Broken access control - [Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76293.md) `CVE-2026-76293` · CVE record: Splunk Splunk Enterprise · CVSS 7.2 High · Not analysed yet · Published 21 Oct 2026 · Tags: Code injection - [Missing Authorization through REST API Endpoints in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76292.md) `CVE-2026-76292` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Broken access control - [Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76291.md) `CVE-2026-76291` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Broken access control - [Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76290.md) `CVE-2026-76290` · CVE record: Splunk Splunk Enterprise · CVSS 7.5 High · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service - [Denial of Service (DoS) through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76289.md) `CVE-2026-76289` · CVE record: Splunk Splunk Enterprise · CVSS 6.5 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service - [Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76288.md) `CVE-2026-76288` · CVE record: Splunk Splunk Enterprise · CVSS 7.5 High · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service - [Authorization Bypass in the Data Management REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76287.md) `CVE-2026-76287` · CVE record: Splunk Splunk Enterprise · CVSS 5.4 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Broken access control - [Improper Adherence to Coding Standards in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76285.md) `CVE-2026-76285` · CVE record: Splunk Splunk Enterprise · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-710 - [Improper Neutralization in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76284.md) `CVE-2026-76284` · CVE record: Splunk Splunk Enterprise · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-707 - [Protection Mechanism Failure in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76283.md) `CVE-2026-76283` · CVE record: Splunk Splunk Enterprise · CVSS 7.6 High · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-693 - [Improper Control of a Resource Through its Lifetime in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76282.md) `CVE-2026-76282` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-664 - [Improper Access Control in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76281.md) `CVE-2026-76281` · CVE record: Splunk Splunk Enterprise · No CVSS score · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control - [Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76280.md) `CVE-2026-76280` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control - [Improper Input Validation of Index Names through the collect Command in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76279.md) `CVE-2026-76279` · CVE record: Splunk Splunk Enterprise · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-20 - [Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76278.md) `CVE-2026-76278` · CVE record: Splunk Splunk Enterprise · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control - [Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76277.md) `CVE-2026-76277` · CVE record: Splunk Splunk Enterprise · CVSS 4.1 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-20 - [Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76276.md) `CVE-2026-76276` · CVE record: Splunk Splunk Enterprise · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-1188 - [Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76275.md) `CVE-2026-76275` · CVE record: Splunk Splunk Enterprise · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control - [Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud](https://agentprime.io/advisories/CVE-2026-76274.md) `CVE-2026-76274` · CVE record: Splunk Splunk Enterprise · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Server-side request forgery (SSRF) - [Improper Input Validation through the collect Command in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76273.md) `CVE-2026-76273` · CVE record: Splunk Splunk Enterprise · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-20 - [Missing Access Control through the REST API in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76272.md) `CVE-2026-76272` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control - [Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76271.md) `CVE-2026-76271` · CVE record: Splunk Splunk Enterprise · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service - [Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76270.md) `CVE-2026-76270` · CVE record: Splunk Splunk Enterprise · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: SQL injection - [Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76269.md) `CVE-2026-76269` · CVE record: Splunk Splunk Enterprise · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control - [Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76268.md) `CVE-2026-76268` · CVE record: Splunk Splunk Enterprise · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: Authentication bypass - [Log Injection through the REST API in Splunk App for Splunk O11y Cloud](https://agentprime.io/advisories/CVE-2026-76267.md) `CVE-2026-76267` · CVE record: Splunk Splunk Enterprise · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Other injection - [Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76266.md) `CVE-2026-76266` · CVE record: Splunk Splunk Enterprise · CVSS 7.7 High · Not analysed yet · Published 7 Oct 2026 · Tags: Privilege escalation - [Improper Access Control through REST API Endpoints in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76265.md) `CVE-2026-76265` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control - [Improper Authorization through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76264.md) `CVE-2026-76264` · CVE record: Splunk Splunk Enterprise · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control - [Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76355.md) `CVE-2026-76355` · CVE record: Splunk Splunk Enterprise · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Authentication bypass - [Path Traversal through Search Head Clustering in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76354.md) `CVE-2026-76354` · CVE record: Splunk Splunk Enterprise · CVSS 8.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-158 - [Path Traversal through Knowledge Bundle Replication in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76353.md) `CVE-2026-76353` · CVE record: Splunk Splunk Enterprise · CVSS 5.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [Improper Authorization through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76352.md) `CVE-2026-76352` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76351.md) `CVE-2026-76351` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF) - [Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76350.md) `CVE-2026-76350` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [SPL Injection through Splunk Web Form Tokens in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76349.md) `CVE-2026-76349` · CVE record: Splunk Splunk Enterprise · CVSS 6.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Other injection - [Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76348.md) `CVE-2026-76348` · CVE record: Splunk Splunk Enterprise · CVSS 3.8 Low · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76347.md) `CVE-2026-76347` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF) - [Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76346.md) `CVE-2026-76346` · CVE record: Splunk Splunk Enterprise · CVSS 5.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Cross-site scripting (XSS) - [Remote Code Execution (RCE) through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76345.md) `CVE-2026-76345` · CVE record: Splunk Splunk Enterprise · CVSS 6.0 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Path Traversal through the Search Dispatch REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76344.md) `CVE-2026-76344` · CVE record: Splunk Splunk Enterprise · CVSS 7.7 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-27 - [Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76343.md) `CVE-2026-76343` · CVE record: Splunk Splunk Enterprise · CVSS 6.5 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: SQL injection - [Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76342.md) `CVE-2026-76342` · CVE record: Splunk Splunk Enterprise · CVSS 5.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76341.md) `CVE-2026-76341` · CVE record: Splunk Splunk Enterprise · CVSS 5.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76340.md) `CVE-2026-76340` · CVE record: Splunk Splunk Enterprise · CVSS 5.3 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [SPL Injection through the geostats Command in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76339.md) `CVE-2026-76339` · CVE record: Splunk Splunk Enterprise · CVSS 5.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Command injection - [Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76338.md) `CVE-2026-76338` · CVE record: Splunk Splunk Enterprise · CVSS 8.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: Authentication bypass - [Path Traversal through Splunk Web Static File Serving in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76337.md) `CVE-2026-76337` · CVE record: Splunk Splunk Enterprise · CVSS 5.3 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [Improper Access Control through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76336.md) `CVE-2026-76336` · CVE record: Splunk Splunk Enterprise · CVSS 7.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76335.md) `CVE-2026-76335` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Code injection - [SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76334.md) `CVE-2026-76334` · CVE record: Splunk Splunk Enterprise · CVSS 6.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Cross-site request forgery (CSRF) Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .