CVE-2026-76262

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:29+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-20 11:08:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtj47awptr2l 2026-08-20 11:08:35+00:00|...

CVE-2026-76261

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:27+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CVE-2026-76260

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:24+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CVE-2026-76259

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:22+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-22 01:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtn57aku7l2x...

CVE-2026-76258

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:20+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CVE-2026-76257

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:18+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CVE-2026-76256

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:15+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CVE-2026-76255

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CVE-2026-76254

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:10+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CVE-2026-76253

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:08+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-22 01:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtn3jm37hb23...

CVE-2026-76252

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:05+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CVE-2026-76251

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:03+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-20 18:07:12+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtjtlthw232p 2026-08-20 18:07:14+00:00|...

EUVD-2026-62970

In Splunk On-Call VictorOps app versions below 1.0.43 on Splunkbase, a user who does not hold the "admin" or "power" Splunk roles could read a partially masked Application Programming Interface API key from the App Key Value Store KV Store. The exposure is possible because the Splunk On-Call...

EUVD-2026-62961

In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedulesearch capability could cause a scheduled search to load and deserialize a model file through the apply search command. The improper access control is possible because Splunk AI Toolkit does not mark the apply...

EUVD-2026-62967

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer REST API could configure a non-secure Hypertext Transfer Protocol HTTP Event Collector endpoint in Splunk Enterprise that causes the connector to send...

EUVD-2026-62968

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...

EUVD-2026-62963

In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the experiment history of another user without permission through the Representational State Transfer REST API. The vulnerability is possible because Splunk AI Toolkit deletes...

EUVD-2026-62966

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer REST API could configure timestamp extraction with a crafted regular expression and matching event data to block a Kafka Connect worker thread, stopping event...

EUVD-2026-62965

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer REST API and influence responses from a Hypertext Transfer Protocol HTTP Event Collector endpoint in Splunk Enterprise could cause the connector to retry faile...

EUVD-2026-62964

In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Processing Language SPL using the permissions of the search owner, which could allow access to all relevant data and affect system integrity. Th...