CVE-2026-27141 +23 CVEs: Third-Party Package Updates in Splunk Enterprise - September/October 2026
This Splunk advisory covers CVE-2026-27141 and CVE-2026-33811 and 22 more CVEs in Splunk Enterprise 10.4, Splunk Enterprise 10.2 and Splunk Enterprise 10.0. Its rating, versions and guidance apply to the bulletin as a whole, not to each of its 24 CVEs.
- CVE-2026-27141
- CVE-2026-33811
- CVE-2026-34986
- CVE-2026-39820
- CVE-2026-39821
- CVE-2026-39823
- CVE-2026-39825
- CVE-2026-39826
- CVE-2026-39830
- CVE-2026-39831
- CVE-2026-39832
- CVE-2026-39833
- CVE-2026-39834
- CVE-2026-39836
- CVE-2026-39882
- CVE-2026-42499
- CVE-2026-42508
- CVE-2026-46595
- CVE-2026-8286
- CVE-2026-8924
- CVE-2026-8926
- CVE-2026-8927
- CVE-2026-9079
- CVE-2026-9545
Key facts
- Bulletin rating
- Critical
- Affected
- Splunk Enterprise 10.4.0 to 10.4.2; Splunk Enterprise 10.2.0 to 10.2.6; Splunk Enterprise 10.0.0 to 10.0.9 and 1 more below
- Fixed in
- Splunk Enterprise 10.4.3, Splunk Enterprise 10.2.7, Splunk Enterprise 10.0.10 and 1 more below
- Advisory id
- SVD-2026-1003
- Source published
- Listed by VulniPulse
Compiled by VulniPulse from the linked sources. How records are collected and checked.
Affected products & platforms
Description
Splunk remedied common vulnerabilities and exposures (CVEs) in third-party packages in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 or higher.
Affected products named by the advisory: Splunk Enterprise 10.4; Splunk Enterprise 10.2; Splunk Enterprise 10.0; Splunk Enterprise 9.4.
Text from the source record.
- Splunk Enterprise 10.4.0 to 10.4.2
- Splunk Enterprise 10.2.0 to 10.2.6
- Splunk Enterprise 10.0.0 to 10.0.9
- Splunk Enterprise 9.4.0 to 9.4.14
Official advisory · high-confidence parse· fetched ·verify at source
Fix and mitigation
Fixed releases named by the bulletin:
- Splunk Enterprise 10.4.3
- Splunk Enterprise 10.2.7
- Splunk Enterprise 10.0.10
- Splunk Enterprise 9.4.15
Vendor guidance
- Upgrade Splunk Enterprise to versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 or higher.
Support dates for the fixed release lines
- Splunk Enterprise 10.4: support ends
- Splunk Enterprise 10.2: support ends
- Splunk Enterprise 10.0: support ends
- Splunk Enterprise 9.4: support ends
More Splunk advisories
CVE-2025-61726Oct 21, 2026Third-Party Package Updates in Splunk Enterprise - October 2026CVE-2024-35255Aug 19, 2026Third-Party Package Updates in Splunk Enterprise - August 2026CVE-2026-105482Oct 28, 2026Vulnerabilities in Node.jsCVE-2026-76531Oct 21, 2026Splunk: As part of Cisco's ongoing commitment to proactive security and product qualityCVE-2026-76530Oct 21, 2026Splunk: As part of Cisco's ongoing commitment to proactive security and product qualityCVE-2026-76529Oct 21, 2026Splunk: As part of Cisco's ongoing commitment to proactive security and product quality
Get an email when Splunk Enterprise publishes the next one.
See Splunk Enterprise's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor future Splunk CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.