Sploitus

4 exploited vulnerabilities in Splunk Cloud Platform

Vulnerabilities with publicly known exploits

Vendors
Splunk
With known exploits
4
Affected Splunk versions
< 10.0.7, 10.2.4, 8.1.14, 8.2.11, 9.0.5, 9.0.10, 9.1.5, 9.2.2
Affected Splunk Splunk Cloud Platform versions
< 9.0.2303.100, 9.1.2308.209, 9.1.2312.109, 9.1.2312.202, 9.1.2308.207, 9.1.2312.200

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2026-20253 5 exploits
CVSS 9.8 CRITICAL 2026-06-10FIX AVAILABLE
Exploit for Missing Authentication for Critical Function in SplunkExploit for Missing Authentication for Critical Function in Splunk
CVE-2023-32707 7 exploits
CVSS 9.0 HIGH 2023-06-01FIX AVAILABLE
Exploit for Improper Authorization in SplunkSplunk edit_user Capability Privilege Escalation Exploit
CVE-2024-36990
CVSS 6.8 MEDIUM 2024-07-01FIX AVAILABLE
CVE-2024-36993
CVSS 5.4 MEDIUM 2024-07-01FIX AVAILABLE