Splunk Splunk Enterprise <10.0.10

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical1high18medium0low

updated 2026-10-28

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-76268US	critical9.8OT high	4.79% (92nd)	Exploit	no fix	2026-10-07	—
CVE-2025-47911US	medium5.3	0.57% (47th)	—	no fix	2026-02-05	—
CVE-2026-27141US	—	0.57% (47th)	—	no fix	2026-02-26	—
CVE-2025-58190US	medium5.3	0.55% (46th)	—	no fix	2026-02-05	—
CVE-2025-22872US	—	0.55% (46th)	—	no fix	2025-04-16	—
CVE-2026-20239US	medium6.5	0.48% (42nd)	—	no fix	2026-05-20	—
CVE-2026-76284US	—	0.43% (37th)	—	no fix	2026-10-07	—
CVE-2026-20240US	—	0.40% (34th)	—	no fix	2026-05-20	—
CVE-2026-76282US	—	0.38% (32nd)	—	no fix	2026-10-07	—
CVE-2026-76285US	critical9.8	0.37% (30th)	—	no fix	2026-10-07	—
CVE-2026-76271US	medium6.5	0.35% (29th)	—	no fix	2026-10-07	—
CVE-2026-76274US	medium6.5	0.34% (28th)	—	no fix	2026-10-07	—
CVE-2026-76270US	medium6.5	0.32% (25th)	—	no fix	2026-10-07	—
CVE-2026-76265US	medium6.5	0.30% (23rd)	—	no fix	2026-10-07	—
CVE-2026-76269US	medium6.5	0.29% (21st)	—	no fix	2026-10-07	—
CVE-2026-76283US	—	0.27% (18th)	—	no fix	2026-10-07	—
CVE-2026-76275US	medium4.3	0.26% (18th)	—	no fix	2026-10-07	—
CVE-2026-76277US	medium4.1	0.24% (16th)	—	no fix	2026-10-07	—
CVE-2026-76276US	medium4.3OT elevated	0.24% (15th)	—	no fix	2026-10-07	—
CVE-2026-76280US	medium6.3	0.22% (13th)	—	no fix	2026-10-07	—
CVE-2026-76279US	medium4.3	0.22% (13th)	—	no fix	2026-10-07	—
CVE-2026-76273US	medium4.3	0.22% (13th)	—	no fix	2026-10-07	—
CVE-2026-76267US	medium4.3	0.22% (13th)	—	no fix	2026-10-07	—
CVE-2026-76264US	medium4.3OT elevated	0.22% (13th)	—	no fix	2026-10-07	—
CVE-2026-76272US	medium4.3OT elevated	0.22% (12th)	—	no fix	2026-10-07	—
CVE-2026-76278US	medium4.3	0.21% (12th)	—	no fix	2026-10-07	—
CVE-2026-76281US	—	0.18% (7th)	—	no fix	2026-10-07	—
CVE-2026-76266US	high7.7	0.15% (4th)	—	no fix	2026-10-07	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation5 CVEs
CWE-284Improper Access Control2 CVEs
CWE-407Inefficient Algorithmic Complexity2 CVEs
CWE-639Authorization Bypass Through User-Controlled Key2 CVEs
CWE-664Improper Control of a Resource Through its Lifetime2 CVEs
CWE-117Improper Output Neutralization for Logs1 CVEs
CWE-1188Initialization of a Resource with an Insecure Default1 CVEs
CWE-269Improper Privilege Management1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan