Splunk security advisories, July 2026

Every Splunk security advisory published in July 2026, from Splunk Security Advisories (advisory.splunk.com) + NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 3
Critical: 0
High: 2
In CISA KEV: 0
CVEs: 3

Splunk advisories published in July 2026

Jul 15, 2026
High [CVE-2026-20296] SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise
High8.3
Jul 15, 2026
High [CVE-2026-20297] Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise
High7.2
Jul 15, 2026
Medium [CVE-2026-20298] Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise
Medium5.3

Get an email when Splunk publishes the next one.

See Splunk's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Splunk

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.