Splunk security advisory (AV25-754)

Serial number: AV25-754
Date: November 14, 2025

On November 12, 2025, Splunk published security advisories to address vulnerabilities in the following products:

• Splunk Enterprise – multiple versions
• Splunk Cloud Platform – multiple versions

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Open Redirect on Web Login endpoint in Splunk Enterprise
• Risky command safeguards bypass using the “/services/streams/search” REST endpoint through “q” parameter in Splunk Enterprise
• Third-Party Package Updates in Splunk Enterprise - November 2025
• Splunk Security Advisories