CVE-2026-76273

Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to improper input validation via the collect Search Processing Language (SPL) command. An attacker with the run_collect capability can exploit the fact that the command fails to validate the index name before proc...

EUVD-2026-94625

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the runcollect capability could use the collect Search Processing Language SPL command to add attacker-controlled content to system-level messages on the Splunk platform instance. The...

EUVD-2022-45000

Malicious code in bioql PyPI...

Splunk Enterprise 8.1 < 8.1.13, 8.2.0 < 8.2.10, 9.0.0 < 9.0.4 (SVD-2023-0210)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2023-0210 advisory. - In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the collect' search processing language SPL command...