Skip to content
VulniPulse
Sign in
CriticalSplunk

CVE-2024-35255 +32 CVEs: Third-Party Package Updates in Splunk Enterprise - August 2026

This Splunk advisory covers CVE-2024-35255 and CVE-2025-14017 and 31 more CVEs in Splunk Enterprise 10.4, Splunk Enterprise 10.2 and Splunk Enterprise 10.0. Its rating, versions and guidance apply to the bulletin as a whole, not to each of its 33 CVEs.

Open the Splunk advisory

Key facts

Bulletin rating
Critical
Affected
Splunk Enterprise 10.4.0 to 10.4.1; Splunk Enterprise 10.2.0 to 10.2.5; Splunk Enterprise 10.0.0 to 10.0.8 and 1 more below
Fixed in
Splunk Enterprise 10.4.2, Splunk Enterprise 10.2.6, Splunk Enterprise 10.0.9 and 1 more below
Advisory id
SVD-2026-0802
Source published
Listed by VulniPulse

Compiled by VulniPulse from the linked sources. How records are collected and checked.

Affected products & platforms

SplunkSplunk Enterprise

Description

Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in Splunk Enterprise versions 10.4.2, 10.2.6, 10.0.9, 9.4.14, and higher.

Affected products named by the advisory: Splunk Enterprise 10.4; Splunk Enterprise 10.2; Splunk Enterprise 10.0; Splunk Enterprise 9.4.

Text from the source record.

Affected versions
  • Splunk Enterprise 10.4.0 to 10.4.1
  • Splunk Enterprise 10.2.0 to 10.2.5
  • Splunk Enterprise 10.0.0 to 10.0.8
  • Splunk Enterprise 9.4.0 to 9.4.13

Official advisory · high-confidence parse· fetched ·verify at source

Fix and mitigation

Fixed releases named by the bulletin:

  • Splunk Enterprise 10.4.2
  • Splunk Enterprise 10.2.6
  • Splunk Enterprise 10.0.9
  • Splunk Enterprise 9.4.14

Vendor guidance

  • Upgrade Splunk Enterprise to versions 10.4.2, 10.2.6, 10.0.9, 9.4.14, or higher.

Support dates for the fixed release lines

All end-of-life dates for Splunk Enterprise

More Splunk advisories

Splunk advisories, August 2026All Splunk advisories

Get an email when Splunk Enterprise publishes the next one.

See Splunk Enterprise's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Splunk Enterprise

iPhone and Android apps · New on the App Store

Monitor future Splunk CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Download on the App StoreGet CVE alerts on AndroidSee app features