Splunk

USA Commercial www.splunk.com ↗ Bug Bounty ↗ ⚠ 1 CISA KEV 📈 NASDAQ:SPLK
B
MODERATE
277
Total CVEs
121
Crit / High
141
Medium
29%
Unpatched
1%
Patched
6.5
Avg CVSS
1
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
1%
Unpatched
29%
Under Review
71%
✓ 2 patched ✗ 79 unpatched ~ 196 under review
▸ Stock — NASDAQ:SPLK Yahoo Finance ↗

No data — run stock_fetcher.py first

▸ Intelligence by Audience
PoC Available
3 / 20 shown
CISA KEV (Exploited)
1
Shodan Dorks
ssl:"splunk" port:443
org:"Splunk" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-76268 0.40% exploitation probability
CVE-2026-76271 0.27% exploitation probability
CVE-2026-76274 0.27% exploitation probability
CVE-2026-76270 0.24% exploitation probability
CVE-2026-76265 0.23% exploitation probability
🎯 Bug Bounty Program: https://www.splunk.com/en_us/legal/bug-bounty-program.html
Quick Facts for Reporting
Total CVEs tracked
277
Critical severity
9
Actively exploited (CISA)
1
Unpatched ratio
29%
Avg CVSS score
6.5
Security grade
B (MODERATE)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-10-12
Security Risk Score (for investors)
MED
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Splunk Patches Critical 9.8 Flaw Allowing Unauthenticated Remote Command Execution - CyberSecurityNews
CyberSecurityNews 5d ago
Critical Splunk Enterprise Vulnerability Enables Unauthenticated Remote Code Execution - LinkedIn
LinkedIn 2026-06-15
Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure - SecurityWeek
SecurityWeek 2026-06-19
Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication - The Hacker News
The Hacker News 2026-06-13
U.S. CISA adds Splunk Enterprise flaw to its Known Exploited Vulnerabilities catalog and urges agencies to... - Security Affairs
Security Affairs 2026-06-19
Splunk Enterprise and Cloud Platform Exposed to Dangerous RCE Vulnerability - GBHackers News
GBHackers News 2026-04-16
▸ Recent CVEs showing 20 of 277
CVE IDSeverityPatchEPSSDate
CVE-2026-76273 4.3 MEDIUM UNKNOWN / UNPATCHED 0.17% 2026-10-07
CVE-2026-76286 5.3 MEDIUM UNKNOWN / UNPATCHED 0.17% 2026-10-07
CVE-2026-76268 PoC 9.8 CRITICAL UNKNOWN / UNPATCHED 0.40% 2026-10-07
CVE-2026-76270 6.5 MEDIUM UNKNOWN / UNPATCHED 0.24% 2026-10-07
CVE-2026-76278 4.3 MEDIUM UNKNOWN / UNPATCHED 0.16% 2026-10-07
CVE-2026-76272 4.3 MEDIUM UNKNOWN / UNPATCHED 0.17% 2026-10-07
CVE-2026-76271 6.5 MEDIUM UNKNOWN / UNPATCHED 0.27% 2026-10-07
CVE-2026-76282 8.8 HIGH UNKNOWN / UNPATCHED 0.15% 2026-10-07
CVE-2026-76266 7.7 HIGH UNKNOWN / UNPATCHED 0.12% 2026-10-07
CVE-2026-76279 4.3 MEDIUM UNKNOWN / UNPATCHED 0.17% 2026-10-07
CVE-2026-76275 4.3 MEDIUM UNKNOWN / UNPATCHED 0.20% 2026-10-07
CVE-2026-76274 6.5 MEDIUM UNKNOWN / UNPATCHED 0.27% 2026-10-07
CVE-2026-76276 4.3 MEDIUM UNKNOWN / UNPATCHED 0.18% 2026-10-07
CVE-2026-76285 PoC 9.8 CRITICAL UNKNOWN / UNPATCHED 0.14% 2026-10-07
CVE-2026-76280 6.3 MEDIUM UNKNOWN / UNPATCHED 0.17% 2026-10-07
CVE-2026-76265 6.5 MEDIUM UNKNOWN / UNPATCHED 0.23% 2026-10-07
CVE-2026-76281 5.3 MEDIUM UNKNOWN / UNPATCHED 0.15% 2026-10-07
CVE-2026-76264 4.3 MEDIUM UNKNOWN / UNPATCHED 0.17% 2026-10-07
CVE-2026-76267 PoC 4.3 MEDIUM UNKNOWN / UNPATCHED 0.17% 2026-10-07
CVE-2026-76277 4.1 MEDIUM UNKNOWN / UNPATCHED 0.18% 2026-10-07
View all 277 CVEs for Splunk →
▸Intel
HQSan Francisco, California, United States
Founded2003
Employees7,000
CEOGary Steele
Ticker NASDAQ:SPLK ↗
CountryUSA
LicenseCommercial
Bug BountyView Program ↗
Trust ScoreB — MODERATE
Max CVSS9.8
Last Updated2026-10-12
▸Top Weaknesses
CWE-79
Cross-Site Scripting (XSS)
22 occurrences in Splunk CVEs (8% of total)
CWE-79 ⓘ
22
CWE-862
Unknown Weakness Type
18 occurrences in Splunk CVEs (6% of total)
CWE-862 ⓘ
18
CWE-20
Unknown Weakness Type
17 occurrences in Splunk CVEs (6% of total)
CWE-20 ⓘ
17
CWE-284
Improper Access Control
15 occurrences in Splunk CVEs (5% of total)
CWE-284 ⓘ
15
CWE-200
Sensitive Information Exposure
14 occurrences in Splunk CVEs (5% of total)
CWE-200 ⓘ
14
CWE-269
Improper Privilege Management
10 occurrences in Splunk CVEs (4% of total)
CWE-269 ⓘ
10
CWE-732
Unknown Weakness Type
9 occurrences in Splunk CVEs (3% of total)
CWE-732 ⓘ
9
CWE-918
Server-Side Request Forgery (SSRF)
8 occurrences in Splunk CVEs (3% of total)
CWE-918 ⓘ
8
▸Company Profile

Splunk is a cybersecurity and observability platform provider that enables organizations to search, monitor, and analyze machine-generated data for security information and event management (SIEM), IT operations, and threat detection. Its flagship product, the Splunk Enterprise platform, is widely used by security teams for real-time monitoring, incident response, and compliance reporting. Splunk is a significant player in the cybersecurity industry, with its technology being critical for many enterprises' security operations centers (SOCs).

▸Response Metrics
Est. MTTR ⓘ ~493 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +303% worse
CVE count 2026 vs 2025:  38 → 153 CVEs
Patch Speed ⓘ Good (20–40% open)
29% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€301K
Est. GDPR High
€3.0M

Based on 9 critical CVEs, 1 CISA KEV, 29% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Splunk B valtersit.com