Vendor
Splunk
1 of 14 Splunk CVEs in Patchfirst (7%) are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it. of vulnerabilities exploited in the wild.
- CVEs
- 14
- In CISA KEV
- 17%
- Known ransomware use
- 0
- Median days to KEV
- 8
- from publication
- Latest KEV listing
- 18 Jun 2026
Products
In KEVOther CVEs
- Enterprise In KEV: 1 CVEs: 1
- Splunk Enterprise In KEV: 0 CVEs: 9
- Splunk SOAR In KEV: 0 CVEs: 4
Top ATT&CK techniques
What attackers do with Splunk CVEs- T1190Exploit Public-Facing Application CVEs: 1
- T1565.001Stored Data Manipulation CVEs: 1
Counts are Splunk CVEs linked to the technique. Each link’s provenance is on the CVE page.
Splunk CVEs
14 CVEs, by priority- CVE-2026-20253Splunk Enterprise Missing Authentication for Critical Function VulnerabilitySplunk · EnterpriseKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1565.001Stored Data Manipulation96.9%Top 0.11%74.8priority
- CVE-2024-36991Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on WindowsSplunk · Splunk EnterprisePublic exploitHigh · 7.513.0%Top 3.7%64.5priority
- CVE-2026-76268In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni…Splunk · Splunk EnterprisePublic exploitCritical · 9.84.8%Top 8.1%32.4priority
- CVE-2023-32707‘edit_user’ Capability Privilege EscalationSplunk · Splunk EnterprisePublic exploitHigh · 8.878.7%Top 0.41%31.1priority
- CVE-2023-46214Remote code execution (RCE) in Splunk Enterprise through Insecure XML ParsingSplunk · Splunk EnterprisePublic exploitHigh · 8.089.2%Top 0.22%30.6priority
- CVE-2026-76284As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…Splunk · Splunk EnterpriseCritical · 9.80.4%Top 63%16.5priority
- CVE-2026-76527As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…Splunk · Splunk SOARCritical · 9.80.4%Top 63%16.3priority
- CVE-2026-76531As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…Splunk · Splunk SOARCritical · 9.90.4%Top 65%15.9priority
- CVE-2026-76302As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…Splunk · Splunk EnterpriseCritical · 9.90.4%Top 66%15.7priority
- CVE-2026-76301As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…Splunk · Splunk EnterpriseCritical · 9.80.4%Top 68%15.2priority
- CVE-2026-76285As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…Splunk · Splunk EnterpriseCritical · 9.80.4%Top 70%15.1priority
- CVE-2026-76299As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…Splunk · Splunk EnterpriseCritical · 9.90.3%Top 74%14.1priority
- CVE-2026-76529As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…Splunk · Splunk SOARCritical · 9.80.2%Top 94%10.1priority
- CVE-2026-76408As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…Splunk · Splunk SOARCritical · 9.80.2%Top 94%10.1priority