Splunk Enterprise REST API Unauthenticated Access Code Execution

The vulnerability of the REST API interface implementation of the Splunk Enterprise platform for operational analysis is related to an incorrect limitation on the path name to the $SPLUNKHOME/etc/ directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access t...

Splunk Web Deployment Server Arbitrary SPL Command Information Disclosure

The vulnerability of the Deployment Server web interface of the Splunk Web platform for operational analysis in Splunk Enterprise relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary SPL commands and disclose sensitive...

Splunk MCP Server IDE Login - Detect

Splunk MCP Server IDE login interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Splunk MCP Server IDE login interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Splunk MCP Serv...

Splunk Enterprise - Local File Inclusion Detection

In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows. !/usr/bin/env python3 -- coding: utf-8 --...

GHSA-RX9V-2FJR-MHX5 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

CVE-2026-5051 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GHSA-RX9V-2FJR-MHX5 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2026-4525 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GHSA-72GW-FMMR-C4R4 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GHSA-88V5-9HXC-F85R vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2026-3605 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2026-5052 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2026-5807 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GHSA-8R5M-3F66-QPR3 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GHSA-M2W4-8GGF-RJ47 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2026-5051 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

bigml (>=9.8.0, <=9.8.1), neuroflow-yalab (>=0.1.8, <=0.1.9) +2 more potentially affected by CVE-2026-59890 via setuptools (69.0.0)

setuptools PYPI version 69.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bigml =9.8.0, =0.1.8, =3.8.1, =3.9.1 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

Exploit for Missing Authentication for Critical Function in Splunk

Splunk Enterprise — CVE-2026-20253 Training Lab Splunk En...

Beyond Success Rate: Cost-Aware Evaluation of Offensive and Defensive Security Agents

Security-agent evaluations commonly measure peak offensive capability under generous inference budgets, emphasizing vulnerability discovery, exploit development, penetration testing, and CTF completion. Such measurements are useful but incomplete: in operational security, every reasoning step, to...

CVE-2026-20297

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.2.2510.18, and 10.1.2507.24, a user who holds a role that contains the editlocalapps and installapps capabilities could cause a legitimate app...