CVE-2026-76405 - In Splunk On-Call (VictorOps) app versions below 1.0.43 on Splunkbase, a user who does not hold the

CVE-2026-76404 - In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execut

CVE-2026-76403 - In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network

CVE-2026-76402 - In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Co

CVE-2026-76401 - In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Co

CVE-2026-76400 - In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Co

CVE-2026-76399 - In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app

CVE-2026-76398 - In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk ro

CVE-2026-76397 - In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and

CVE-2026-76396 - In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capabil

CVE-2026-76395 - In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute ar

CVE-2026-76394 - In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "p

CVE-2026-76393 - In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model bein

CVE-2026-76392 - In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk ro

CVE-2026-76391 - In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk ro

CVE-2026-76388 - In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterpri

CVE-2026-76387 - In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security ro

CVE-2026-76386 - In versions below 3.2.2 of the Zoom app for Splunk SOAR, a user who holds a role with permission to

CVE-2026-76385 - In versions below 2.1.4 of the Venafi app for Splunk SOAR, a user who holds a role with permission t

CVE-2026-76384 - In versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR, a user who holds a

CVE-2026-76383 - In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a user who ho

CVE-2026-76382 - In versions below 3.8.5 of the Phantom app for Splunk SOAR, a user who holds a role with permission

CVE-2026-76381 - In versions below 1.5.2 of the MS Graph for Active Directory app for Splunk SOAR, a user who holds a

CVE-2026-76380 - In versions below 5.1.3 of the CrowdStrike OAuth API app for Splunk SOAR, a user who holds a role wi

CVE-2026-76377 - In versions below 2.5.3 of the Azure AD Graph app for Splunk SOAR, a user who holds a role with perm

CVE-2026-76376 - In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission

CVE-2026-76375 - In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission

CVE-2026-76374 - In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission

CVE-2026-76373 - In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission

CVE-2026-76372 - In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playboo

CVE-2026-76371 - In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in

CVE-2026-76370 - In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use t

CVE-2026-76369 - In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outsi

CVE-2026-76368 - In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permis

CVE-2026-76367 - In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role coul

CVE-2026-76366 - In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representatio

CVE-2026-76365 - In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role cou

CVE-2026-76364 - In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role cou

CVE-2026-76363 - In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbit

CVE-2026-76362 - In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffi

CVE-2026-76361 - In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/suppor

CVE-2026-76360 - In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could use the /rest

CVE-2026-76359 - In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversa

CVE-2026-76358 - In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal dur

CVE-2026-76357 - In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a craf

CVE-2026-76356 - In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a

CVE-2026-76355 - In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the informat

CVE-2026-76354 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76353 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76352 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76351 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve

CVE-2026-76350 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role wit

CVE-2026-76349 - In Splunk Enterprise versions below 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick

CVE-2026-76348 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds a Splunk ro

CVE-2026-76347 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve

CVE-2026-76346 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76345 - In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can manage

CVE-2026-76344 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76343 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76342 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76341 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76340 - In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could cause Splunk Enterpri

CVE-2026-76339 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76338 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who

CVE-2026-76337 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user coul

CVE-2026-76336 - In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "powe

CVE-2026-76335 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an authenticated user who do

CVE-2026-76334 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76333 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76332 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user coul

CVE-2026-76331 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76330 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user coul

CVE-2026-76329 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user coul

CVE-2026-76328 - In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76327 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve

CVE-2026-76326 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76325 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76324 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power"

CVE-2026-76323 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76322 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "user"

CVE-2026-76321 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user coul

CVE-2026-76320 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user coul

CVE-2026-76319 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that d

CVE-2026-76318 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role wit

CVE-2026-76317 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76316 - In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.9, and 9.4.14, an unauthenticated user who

CVE-2026-76315 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76314 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76313 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the

CVE-2026-76312 - In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who

CVE-2026-76311 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who

CVE-2026-76310 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who

CVE-2026-76309 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that d

CVE-2026-76263 - In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "powe

CVE-2026-76262 - In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus servi

CVE-2026-76261 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve

CVE-2026-76260 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role wit

CVE-2026-76259 - In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local

CVE-2026-76258 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve

CVE-2026-76257 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve

CVE-2026-76256 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve

CVE-2026-76255 - In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.8, and 9.4.13, a user who does not hold the

CVE-2026-76254 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, 9.4.14, and 9.3.14, an unauthenticated u

CVE-2026-76253 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role wit

CVE-2026-76252 - In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.13, an unauthenticated user who

CVE-2026-76251 - In Splunk Enterprise versions below 10.4.2, 10.2.6, and 10.0.9, a user who does not hold the "admin"

CVE-2026-20298 - In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform ve

CVE-2026-20297 - In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Pla

CVE-2026-20296 - In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform ve

CVE-2026-20266 - In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute ar

CVE-2026-20265 - In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "

CVE-2026-20260 - In Splunk SOAR (Security Orchestration, Automation, and Response) versions below 8.5.0, an unauthent

CVE-2026-20259 - In Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4

CVE-2026-20258 - In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform ve

CVE-2026-20257 - In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform ve

CVE-2026-20256 - In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform ve

CVE-2026-20255 - In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform ve

CVE-2026-20254 - In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform ve

CVE-2026-20253 - In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated use

CVE-2026-20252 - In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform ve

CVE-2026-20251 - In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versio