Splunk vulnerabilities
- Splunk has 278 CVE records published between 28 Oct 2023 and 28 Oct 2026, ranking #45 of 420 vendors on this site by that count.
- Of the 272 with a CVSS score, 96 (35.3%) are rated critical or high; 6 (2.2% of all) have no CVSS score.
- 1 vulnerability attributed to Splunk is listed in CISA's Known Exploited Vulnerabilities (KEV) catalog; the most recent, CVE-2026-20253, was added on 18 Jun 2026.
- It is marked as known to be used in ransomware campaigns.
- For the 1 KEV entry with a published CVE record, the median time from CVE publication to KEV listing is 8 days.
Records are attributed to Splunk from the vendor named in the source records. About the data.
CVE records per year
Show data as a table
| Year | CVE records |
|---|---|
| 2017 | 4 |
| 2018 | 0 |
| 2019 | 0 |
| 2020 | 0 |
| 2021 | 0 |
| 2022 | 31 |
| 2023 | 36 |
| 2024 | 41 |
| 2025 | 38 |
| 2026 | 197 |
2026 is partial (through 28 Oct 2026), shown in a lighter bar.
| Year | Records | Critical | High | Critical or high | Not scored |
|---|---|---|---|---|---|
| 2026 | 197 | 12 | 63 | 39.3% | 3% |
| 2025 | 38 | 0 | 6 | 15.8% | 0% |
| 2024 | 41 | 0 | 14 | 34.1% | 0% |
| 2023 | 36 | 0 | 19 | 52.8% | 0% |
| 2022 | 31 | 1 | 21 | 73.3% | 3.2% |
| 2021 | 0 | 0 | 0 | — | — |
| 2020 | 0 | 0 | 0 | — | — |
| 2019 | 0 | 0 | 0 | — | — |
| 2018 | 0 | 0 | 0 | — | — |
| 2017 | 4 | 0 | 0 | — | 100% |
Source: CVE List V5 (CVE Program), cve_2026-10-28_0000Z, as of 28 Oct 2026. About the data.
Exploited vulnerabilities in CISA's KEV catalog
| CVE | Product | Name | Added | Ransomware |
|---|---|---|---|---|
| CVE-2026-20253 | Enterprise | Splunk Enterprise Missing Authentication for Critical Function Vulnerability | 2026-06-18 | Unknown |
Source: CISA Known Exploited Vulnerabilities (KEV) catalog, 2026.10.27, as of 27 Oct 2026. About the data.
Highest exploit-prediction scores (EPSS)
EPSS estimates the probability that a vulnerability is exploited in the next 30 days. These are the 10 highest-scoring Splunk records today.
| CVE | EPSS | Percentile | Severity | In KEV |
|---|---|---|---|---|
| CVE-2026-20253 | 96.9% | 99.9% | Critical | Yes |
| CVE-2023-46214 | 89.2% | 99.8% | High | No |
| CVE-2023-32707 | 78.7% | 99.6% | High | No |
| CVE-2023-32714 | 42.8% | 98.7% | High | No |
| CVE-2022-43568 | 42.8% | 98.7% | High | No |
| CVE-2026-20251 | 32.2% | 98.3% | High | No |
| CVE-2025-20297 | 29.3% | 98.2% | Medium | No |
| CVE-2025-20229 | 16% | 96.9% | High | No |
| CVE-2024-45741 | 14.8% | 96.7% | Medium | No |
| CVE-2022-43571 | 14.1% | 96.5% | High | No |
Source: FIRST Exploit Prediction Scoring System (EPSS), v2026.06.15, as of 28 Oct 2026; CVE List V5 (CVE Program), cve_2026-10-28_0000Z, as of 28 Oct 2026; CISA Known Exploited Vulnerabilities (KEV) catalog, 2026.10.27, as of 27 Oct 2026. About the data.