{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Splunk vulnerabilities","home_page_url":"https://patchfirst.co/vendor/splunk/","feed_url":"https://patchfirst.co/feed/vendor/splunk.json","description":"New and newly exploited Splunk CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-76527","url":"https://patchfirst.co/cve/CVE-2026-76527/","title":"CVE-2026-76527: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","content_text":"Splunk · Splunk SOAR. Not in CISA KEV. EPSS 0.4% (higher than 37.4% of CVEs). CVSS 9.8 CRITICAL. Priority 16.3 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-29T18:17:34.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.3,"kev":null,"epss":{"score":0.00431,"percentile":0.37409},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Splunk","product":"Splunk SOAR","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76531","url":"https://patchfirst.co/cve/CVE-2026-76531/","title":"CVE-2026-76531: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","content_text":"Splunk · Splunk SOAR. Not in CISA KEV. EPSS 0.4% (higher than 35% of CVEs). CVSS 9.9 CRITICAL. Priority 15.9 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-22T16:57:10.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.9,"kev":null,"epss":{"score":0.00407,"percentile":0.35018},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Splunk","product":"Splunk SOAR","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76302","url":"https://patchfirst.co/cve/CVE-2026-76302/","title":"CVE-2026-76302: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","content_text":"Splunk · Splunk Enterprise. Not in CISA KEV. EPSS 0.4% (higher than 34.2% of CVEs). CVSS 9.9 CRITICAL. Priority 15.7 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-22T16:57:10.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.7,"kev":null,"epss":{"score":0.004,"percentile":0.34197},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Splunk","product":"Splunk Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76301","url":"https://patchfirst.co/cve/CVE-2026-76301/","title":"CVE-2026-76301: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","content_text":"Splunk · Splunk Enterprise. Not in CISA KEV. EPSS 0.4% (higher than 32.3% of CVEs). CVSS 9.8 CRITICAL. Priority 15.2 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-28T03:17:15.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.2,"kev":null,"epss":{"score":0.00382,"percentile":0.32293},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Splunk","product":"Splunk Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76299","url":"https://patchfirst.co/cve/CVE-2026-76299/","title":"CVE-2026-76299: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","content_text":"Splunk · Splunk Enterprise. Not in CISA KEV. EPSS 0.3% (higher than 26.1% of CVEs). CVSS 9.9 CRITICAL. Priority 14.1 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-22T16:57:10.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.1,"kev":null,"epss":{"score":0.00329,"percentile":0.26056},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Splunk","product":"Splunk Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76529","url":"https://patchfirst.co/cve/CVE-2026-76529/","title":"CVE-2026-76529: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","content_text":"Splunk · Splunk SOAR. Not in CISA KEV. EPSS 0.2% (higher than 6.4% of CVEs). CVSS 9.8 CRITICAL. Priority 10.1 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-30T19:19:11.000Z","tags":[],"_patchfirst":{"reason":"published","priority":10.1,"kev":null,"epss":{"score":0.0017,"percentile":0.06404},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Splunk","product":"Splunk SOAR","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76408","url":"https://patchfirst.co/cve/CVE-2026-76408/","title":"CVE-2026-76408: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","content_text":"Splunk · Splunk SOAR. Not in CISA KEV. EPSS 0.2% (higher than 6.4% of CVEs). CVSS 9.8 CRITICAL. Priority 10.1 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-30T19:19:11.000Z","tags":[],"_patchfirst":{"reason":"published","priority":10.1,"kev":null,"epss":{"score":0.0017,"percentile":0.06404},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Splunk","product":"Splunk SOAR","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76268","url":"https://patchfirst.co/cve/CVE-2026-76268/","title":"CVE-2026-76268: In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni…","content_text":"Splunk · Splunk Enterprise. Not in CISA KEV. EPSS 4.8% (higher than 91.9% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 32.4 of 100.","summary":"In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-14T12:20:41.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":32.4,"kev":null,"epss":{"score":0.04795,"percentile":0.91929},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Splunk","product":"Splunk Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-76284","url":"https://patchfirst.co/cve/CVE-2026-76284/","title":"CVE-2026-76284: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","content_text":"Splunk · Splunk Enterprise. Not in CISA KEV. EPSS 0.4% (higher than 37.2% of CVEs). CVSS 9.8 CRITICAL. Priority 16.5 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-16T18:18:36.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.5,"kev":null,"epss":{"score":0.0043,"percentile":0.37213},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Splunk","product":"Splunk Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76285","url":"https://patchfirst.co/cve/CVE-2026-76285/","title":"CVE-2026-76285: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","content_text":"Splunk · Splunk Enterprise. Not in CISA KEV. EPSS 0.4% (higher than 30.4% of CVEs). CVSS 9.8 CRITICAL. Priority 15.1 of 100.","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","date_published":"2026-10-07T00:00:00.000Z","date_modified":"2026-10-16T20:17:57.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.1,"kev":null,"epss":{"score":0.00366,"percentile":0.30441},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Splunk","product":"Splunk Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-20253#kev","url":"https://patchfirst.co/cve/CVE-2026-20253/","title":"[KEV] CVE-2026-20253: Splunk Enterprise Missing Authentication for Critical Function Vulnerability","content_text":"Splunk · Enterprise. In CISA KEV since 2026-06-18. ENISA EUVD lists it as exploited. EPSS 96.9% (higher than 99.89% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1565.001 Stored Data Manipulation. Priority 74.8 of 100.","summary":"Splunk Enterprise Missing Authentication for Critical Function Vulnerability","date_published":"2026-06-18T00:00:00.000Z","date_modified":"2026-07-23T09:10:00.000Z","tags":["kev","public-exploit","T1190","T1565.001"],"_patchfirst":{"reason":"kev","priority":74.8,"kev":{"dateAdded":"2026-06-18","ransomware":false},"epss":{"score":0.96939,"percentile":0.99888},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Splunk","product":"Enterprise","techniqueIds":["T1190","T1565.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-36991","url":"https://patchfirst.co/cve/CVE-2024-36991/","title":"CVE-2024-36991: Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows","content_text":"Splunk · Splunk Enterprise. Not in CISA KEV. EPSS 13.0% (higher than 96.3% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 64.5 of 100.","summary":"Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows","date_published":"2024-07-01T00:00:00.000Z","date_modified":"2025-02-28T11:03:48.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":64.5,"kev":null,"epss":{"score":0.13006,"percentile":0.96327},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Splunk","product":"Splunk Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-46214","url":"https://patchfirst.co/cve/CVE-2023-46214/","title":"CVE-2023-46214: Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing","content_text":"Splunk · Splunk Enterprise. Not in CISA KEV. EPSS 89.2% (higher than 99.78% of CVEs). CVSS 8.0 HIGH. Public exploit code exists. Priority 30.6 of 100.","summary":"Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing","date_published":"2023-11-16T00:00:00.000Z","date_modified":"2025-12-16T18:23:23.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":30.6,"kev":null,"epss":{"score":0.89174,"percentile":0.9978},"cvss":{"score":8,"severity":"HIGH","version":"3.1"},"vendor":"Splunk","product":"Splunk Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-32707","url":"https://patchfirst.co/cve/CVE-2023-32707/","title":"CVE-2023-32707: ‘edit_user’ Capability Privilege Escalation","content_text":"Splunk · Splunk Enterprise. Not in CISA KEV. EPSS 78.7% (higher than 99.59% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 31.1 of 100.","summary":"‘edit_user’ Capability Privilege Escalation","date_published":"2023-06-01T00:00:00.000Z","date_modified":"2025-03-11T15:02:44.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":31.1,"kev":null,"epss":{"score":0.78658,"percentile":0.99587},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Splunk","product":"Splunk Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}}]}