Splunk security advisory (AV26-838)
Serial Number: AV26-838 Date: August 21, 2026 As of August 19, 2026, Splunk is affected by vulnerabilities in the following products: Cisco Talos Intelligence for Enterprise Security Cloud Prior to 1.0.3 Splunk Enterprise Prior to 10.0.9 Prior to 10.2.6 Prior to 10.4.1 Prior to 10.4.2 Prior to 9.4.14 Splunk MCP Server app Prior to 1.2.1 Splunk Universal Forwarder Prior to 10.4.2 Prior to 10.2.6 Prior to 10.0.9 Prior to 9.4.14 Splunk SOAR Prior to 8.6.0 Splunk SOAR Connectors Multiple versions and models Splunk Enterprise Security Prior to 8.6.1 Splunk Apps and Add-ons Multiple versions and models The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Splunk Security Advisories
CSIRTS triage
- What
- Multiple vulnerabilities affect Splunk products including Enterprise, Universal Forwarder, SOAR, and Enterprise Security.
- Who is affected
- Splunk Enterprise, Universal Forwarder, SOAR, Enterprise Security, and MCP Server app deployments across multiple versions.
- Urgency
- Moderate: no active exploitation reported; severity unspecified pending advisory review.
- Action
- Apply security updates to all affected Splunk products by upgrading to the specified minimum versions.
AI-assisted analysis generated from the source advisory — verify against the original.
Details
Original advisory: https://cyber.gc.ca/en/alerts-advisories/splunk-security-advisory-av26-838
More from Canadian Centre for Cyber Security
- unknownWatchGuard security advisory (AV26-847)2026-08-25
- unknownOpenSSL security advisory (AV26-846)2026-08-25
- unknownGitea security advisory (AV26-845)2026-08-25
- unknownGoogle security advisory (AV26-844)2026-08-24
- criticalOracle security advisory – January 2026 quarterly rollup (AV26-042) – Update 22026-08-24