Splunk Splunk Enterprise Security

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-763888.6 – < 8.6.1Privilege Escalation through Search Macro Permissions in Splunk Enterprise SecurityHIGH 8.10.4 %
CVE-2026-763878.6 – < 8.6.1SPL Injection through the REST API in Splunk Enterprise SecurityHIGH 8.10.4 %