Splunk security advisory (AV26-708)

Serial number: AV26-708 Date: July 16, 2026 On July 15, 2026, Splunk published security advisories to address vulnerabilities in the following products. Included were critical updates for the following: Splunk Enterprise – multiple versions and platforms Splunk Cloud Platform – multiple versions and platforms The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates. SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise Third-Party Package Updates in Splunk Enterprise - July 2026 Splunk Security Advisories