| CVE-2026-76405 | medium | 4.3 | In Splunk On-Call (VictorOps) app versions below 1.0.43 on Splunkbase, a user who does not hold the … | Aug 19, 2026 | Aug 24, 2026 |
| CVE-2026-76404 | critical | 9.1 | In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execut… | Aug 19, 2026 | Aug 24, 2026 |
| CVE-2026-76403 | high | 7.4 | In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network … | Aug 19, 2026 | Aug 24, 2026 |
| CVE-2026-76402 | high | 8.2 | In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Co… | Aug 19, 2026 | Aug 24, 2026 |
| CVE-2026-76401 | medium | 5.9 | In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Co… | Aug 19, 2026 | Aug 24, 2026 |
| CVE-2026-76400 | medium | 5.9 | In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Co… | Aug 19, 2026 | Aug 24, 2026 |
| CVE-2026-76399 | high | 8.1 | In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app… | Aug 19, 2026 | Aug 26, 2026 |
| CVE-2026-76398 | medium | 4.3 | In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk ro… | Aug 19, 2026 | Aug 24, 2026 |
| CVE-2026-76397 | high | 8.1 | In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and… | Aug 19, 2026 | Aug 21, 2026 |
| CVE-2026-76396 | high | 7.5 | In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capabil… | Aug 19, 2026 | Aug 21, 2026 |
| CVE-2026-76395 | high | 8.8 | In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute ar… | Aug 19, 2026 | Aug 26, 2026 |
| CVE-2026-76394 | high | 8.3 | In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "p… | Aug 19, 2026 | Aug 26, 2026 |
| CVE-2026-76393 | medium | 5.9 | In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model bein… | Aug 19, 2026 | Aug 26, 2026 |
| CVE-2026-76392 | medium | 5.4 | In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk ro… | Aug 19, 2026 | Aug 26, 2026 |
| CVE-2026-76391 | high | 8.3 | In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk ro… | Aug 19, 2026 | Aug 26, 2026 |
| CVE-2026-76388 | high | 8.1 | In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterpri… | Aug 19, 2026 | Aug 25, 2026 |
| CVE-2026-76387 | high | 8.1 | In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security ro… | Aug 19, 2026 | Aug 25, 2026 |
| CVE-2026-76370 | medium | 4.3 | In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use t… | Aug 19, 2026 | Aug 21, 2026 |
| CVE-2026-76369 | low | 2.7 | In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outsi… | Aug 19, 2026 | Aug 21, 2026 |
| CVE-2026-76368 | low | 2.7 | In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permis… | Aug 19, 2026 | Aug 21, 2026 |
| CVE-2026-76367 | medium | 4.0 | In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role coul… | Aug 19, 2026 | Aug 26, 2026 |
| CVE-2026-76366 | medium | 6.5 | In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representatio… | Aug 19, 2026 | Aug 21, 2026 |
| CVE-2026-76365 | medium | 6.5 | In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role cou… | Aug 19, 2026 | Aug 21, 2026 |
| CVE-2026-76364 | medium | 6.5 | In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role cou… | Aug 19, 2026 | Aug 21, 2026 |
| CVE-2026-76363 | medium | 6.5 | In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbit… | Aug 19, 2026 | Aug 21, 2026 |
