Multiple Vulnerabilities Discovered in Splunk Products Affecting Security Integrity

• •Splunk disclosed multiple vulnerabilities across its products with CVSS scores up to 8.1.
• •CVE-2026-76338 and CVE-2026-76364 allow unauthorized access and SQL injection, respectively.
• •Organizations are urged to upgrade to the latest versions to mitigate these vulnerabilities.

Splunk has disclosed several vulnerabilities affecting its products, including Splunk Enterprise, SOAR, and AI Toolkit. Key vulnerabilities include CVE-2026-76338, CVE-2026-76352, CVE-2026-76362, CVE-2026-76364, and CVE-2026-76399, with CVSS scores ranging from 6.5 to 8.1. Attack vectors include unauthorized access through REST API exploitation, Cross-Site Scripting (XSS), and SQL injection. Affected systems include Splunk Enterprise versions below 10.4.2 and Splunk SOAR versions below 8.6.0. Users are advised to upgrade to the latest versions to mitigate risks. Current reports indicate no public proof-of-concept exploits, but the vulnerabilities pose significant risks to data confidentiality and system integrity. Organizations should audit their configurations and restrict roles to trusted users.