Splunk security advisory (AV26-1018)

Serial number: AV26-1018
Date: October 8, 2026

As of October 7, 2026, Splunk is affected by vulnerabilities in the following products:

• Splunk Enterprise
  • Prior to 10.0.10
  • Prior to 10.2.7
  • Prior to 10.4.3
  • Prior to 9.4.15
• Splunk MCP Server
  • Prior to 1.2.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Security Vulnerabilities in Splunk Enterprise - September/October 2026 - SVD-2026-1001
• Security Vulnerability in Splunk MCP Server - September/October 2026 - SVD-2026-1004
• Splunk Security Advisories