CVE-2026-76358: Improper Limitation of a Pathname to a Restricted Directory

In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal during app installation to write files outside the intended temporary directory. The vulnerability is a path traversal in the archive extraction routine, which does not validate that extracted file...

CVE-2026-76316: Improper Neutralization of Special Elements in Data Query Logic

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.9, and 9.4.14, an unauthenticated user who can reach the Splunk management port could store a Search Processing Language SPL pipeline that runs when an administrator opens the Add Data forwarder workflow. The SPL pipeline could access all...

GO-2025-3839 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GO-2025-3842 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GO-2025-4070 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GO-2026-5487 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, vault-fips, splunk-otel-collector-fips, vault...

GO-2026-5199 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, vault-fips, splunk-otel-collector-fips, vault...

GO-2026-5262 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, vault-fips, splunk-otel-collector-fips, vault...

GO-2025-3836 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GO-2025-3841 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GO-2025-3838 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GO-2025-3840 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GO-2025-3848 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips, vault...

GO-2025-4071 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GO-2025-3663 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GO-2025-3924 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips, vault...

GO-2025-3788 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GO-2025-3837 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GO-2026-5247 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, vault-fips, splunk-otel-collector-fips, vault...

GO-2025-3650 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, opentelemetry-collector-contrib-fips, sqlexporter, sqlexporter-fips, splunk-otel-collector, opentelemetry-collector-contrib, splunk-otel-collector-fips, vault, grafana-alloy...