Splunk security advisory (AV26-708)

Serial number: AV26-708
Date: July 16, 2026

On July 15, 2026, Splunk published security advisories to address vulnerabilities in the following products. Included were critical updates for the following:

• Splunk Enterprise – multiple versions and platforms
• Splunk Cloud Platform – multiple versions and platforms

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise
• Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise
• Third-Party Package Updates in Splunk Enterprise - July 2026
• Splunk Security Advisories