Everything you care about in one place

Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.

Get Feeder

advisory.splunk.com

Splunk Security Announcements

Get the latest updates from Splunk Security Announcements directly as they happen.

Follow now 65 followers

Latest posts

Last updated about 1 month ago

SVD-2025-1205: Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgrade

about 1 month ago

In Splunk Enterprise for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10...

SVD-2025-1201: URL validation bypass through Views Dashboard in Splunk Enterprise

about 1 month ago

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk...

SVD-2025-1209: Third-Party Package Updates in Splunk Enterprise - December 2025

about 1 month ago

Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in...

SVD-2025-1206: Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade

about 1 month ago

In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and...

SVD-2025-1203: Unauthenticated Log Injection in Splunk Enterprise

about 1 month ago

In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk...

SVD-2025-1207: Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise

about 1 month ago

In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk...

SVD-2025-1208: Improper Input Validation in "label" column field in Splunk Secure Gateway App

about 1 month ago

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and versions...

SVD-2025-1204: Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise

about 1 month ago

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk...

SVD-2025-1210: SPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP tool

about 1 month ago

In Splunk MCP Server app versions below 0.2.4, a user with access...

SVD-2025-1202: Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app

about 1 month ago

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and below...

SVD-2025-1105: Sensitive Information Disclosure in “_internal“ index through Splunk Add-On for Palo Alto Networks

about 2 months ago

In Splunk Add-on for Palo Alto Networks versions below 2.0.2, the add-on...

SVD-2025-1104: Third-Party Package Updates in Splunk SOAR - November 2025

about 2 months ago

Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in...