Patchfirst: Splunk vulnerabilitieshttps://patchfirst.co/vendor/splunk/New and newly exploited Splunk CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMTCVE-2026-76527: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…https://patchfirst.co/cve/CVE-2026-76527/CVE-2026-76527Wed, 21 Oct 2026 00:00:00 GMTSplunk · Splunk SOAR. Not in CISA KEV. EPSS 0.4% (higher than 37.4% of CVEs). CVSS 9.8 CRITICAL. Priority 16.3 of 100.CVE-2026-76531: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…https://patchfirst.co/cve/CVE-2026-76531/CVE-2026-76531Wed, 21 Oct 2026 00:00:00 GMTSplunk · Splunk SOAR. Not in CISA KEV. EPSS 0.4% (higher than 35% of CVEs). CVSS 9.9 CRITICAL. Priority 15.9 of 100.CVE-2026-76302: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…https://patchfirst.co/cve/CVE-2026-76302/CVE-2026-76302Wed, 21 Oct 2026 00:00:00 GMTSplunk · Splunk Enterprise. Not in CISA KEV. EPSS 0.4% (higher than 34.2% of CVEs). CVSS 9.9 CRITICAL. Priority 15.7 of 100.CVE-2026-76301: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…https://patchfirst.co/cve/CVE-2026-76301/CVE-2026-76301Wed, 21 Oct 2026 00:00:00 GMTSplunk · Splunk Enterprise. Not in CISA KEV. EPSS 0.4% (higher than 32.3% of CVEs). CVSS 9.8 CRITICAL. Priority 15.2 of 100.CVE-2026-76299: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…https://patchfirst.co/cve/CVE-2026-76299/CVE-2026-76299Wed, 21 Oct 2026 00:00:00 GMTSplunk · Splunk Enterprise. Not in CISA KEV. EPSS 0.3% (higher than 26.1% of CVEs). CVSS 9.9 CRITICAL. Priority 14.1 of 100.CVE-2026-76529: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…https://patchfirst.co/cve/CVE-2026-76529/CVE-2026-76529Wed, 21 Oct 2026 00:00:00 GMTSplunk · Splunk SOAR. Not in CISA KEV. EPSS 0.2% (higher than 6.4% of CVEs). CVSS 9.8 CRITICAL. Priority 10.1 of 100.CVE-2026-76408: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…https://patchfirst.co/cve/CVE-2026-76408/CVE-2026-76408Wed, 21 Oct 2026 00:00:00 GMTSplunk · Splunk SOAR. Not in CISA KEV. EPSS 0.2% (higher than 6.4% of CVEs). CVSS 9.8 CRITICAL. Priority 10.1 of 100.CVE-2026-76268: In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni…https://patchfirst.co/cve/CVE-2026-76268/CVE-2026-76268Wed, 07 Oct 2026 00:00:00 GMTSplunk · Splunk Enterprise. Not in CISA KEV. EPSS 4.8% (higher than 91.9% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 32.4 of 100.public-exploitCVE-2026-76284: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…https://patchfirst.co/cve/CVE-2026-76284/CVE-2026-76284Wed, 07 Oct 2026 00:00:00 GMTSplunk · Splunk Enterprise. Not in CISA KEV. EPSS 0.4% (higher than 37.2% of CVEs). CVSS 9.8 CRITICAL. Priority 16.5 of 100.CVE-2026-76285: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…https://patchfirst.co/cve/CVE-2026-76285/CVE-2026-76285Wed, 07 Oct 2026 00:00:00 GMTSplunk · Splunk Enterprise. Not in CISA KEV. EPSS 0.4% (higher than 30.4% of CVEs). CVSS 9.8 CRITICAL. Priority 15.1 of 100.[KEV] CVE-2026-20253: Splunk Enterprise Missing Authentication for Critical Function Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-20253/CVE-2026-20253#kevThu, 18 Jun 2026 00:00:00 GMTSplunk · Enterprise. In CISA KEV since 2026-06-18. ENISA EUVD lists it as exploited. EPSS 96.9% (higher than 99.89% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1565.001 Stored Data Manipulation. Priority 74.8 of 100.kevpublic-exploitT1190T1565.001CVE-2024-36991: Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windowshttps://patchfirst.co/cve/CVE-2024-36991/CVE-2024-36991Mon, 01 Jul 2024 00:00:00 GMTSplunk · Splunk Enterprise. Not in CISA KEV. EPSS 13.0% (higher than 96.3% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 64.5 of 100.public-exploitCVE-2023-46214: Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsinghttps://patchfirst.co/cve/CVE-2023-46214/CVE-2023-46214Thu, 16 Nov 2023 00:00:00 GMTSplunk · Splunk Enterprise. Not in CISA KEV. EPSS 89.2% (higher than 99.78% of CVEs). CVSS 8.0 HIGH. Public exploit code exists. Priority 30.6 of 100.public-exploitCVE-2023-32707: ‘edit_user’ Capability Privilege Escalationhttps://patchfirst.co/cve/CVE-2023-32707/CVE-2023-32707Thu, 01 Jun 2023 00:00:00 GMTSplunk · Splunk Enterprise. Not in CISA KEV. EPSS 78.7% (higher than 99.59% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 31.1 of 100.public-exploit