Splunk security advisory (AV26-838)
Brief
Serial Number: AV26-838
Date: August 21, 2026
As of August 19, 2026, Splunk is affected by vulnerabilities in the following products:
- Cisco Talos Intelligence for Enterprise Security Cloud
- Prior to 1.0.3
- Splunk Enterprise
- Prior to 10.0.9
- Prior to 10.2.6
- Prior to 10.4.1
- Prior to 10.4.2
- Prior to 9.4.14
- Splunk MCP Server app
- Prior to 1.2.1
- Splunk Universal Forwarder
- Prior to 10.4.2
- Prior to 10.2.6
- Prior to 10.0.9
- Prior to 9.4.14
- Splunk SOAR
- Prior to 8.6.0
- Splunk SOAR Connectors
- Multiple versions and models
- Splunk Enterprise Security
- Prior to 8.6.1
- Splunk Apps and Add-ons
- Multiple versions and models
The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.
- Splunk Security Advisories
Splunk security advisory (AV26-838) - Canadian Centre for Cyber Security