Skip to content
OpenAdvisories

Product · Splunk

Splunk MCP Server app

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-76404

    Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server app

    In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is possible because of missing input validation in the app's credential management c…

    Splunk Splunk MCP Server app