Splunk Enterprise vulnerabilities: known CVEs & security history

Splunk · SIEM / observability · 112 tracked CVEs · 1 actively exploited · updated November 2026 · what is a CVE? →

This is the full list of known vulnerabilities (CVEs) across all Splunk Enterprise release lines — 112 in total, with 1 actively exploited in the wild. A CVE here doesn't mean your version is affected — check Splunk Enterprise's current status and the safe version to run.

Known Splunk Enterprise CVEs

Actively-exploited and most-severe first. Showing the top 80 of 112. Open any CVE for full details.

32 older / lower-severity CVEs not shown — see Splunk Enterprise's full record.

Is my Splunk Enterprise version affected?

The list above spans every release. To know whether your version is affected — and the minimum safe version to upgrade to — check it directly.

Check your Splunk Enterprise version → · Monitor Splunk Enterprise for new CVEs →

Splunk Enterprise vulnerabilities — frequently asked

CVE data aggregated from NVD, CISA KEV and EPSS (FIRST.org). Related: Splunk Enterprise security status · Splunk Enterprise end-of-life · actively-exploited CVEs. Always verify against Splunk's advisories — see our disclaimer.