Splunk Security Updates – 15 March 2026

The addressed vulnerabilities could allow the attacker to execute arbitrary shell commands, obtain sensitive information, conduct cross-site scripting attacks, and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. Splunk Enterprise Remote Command Execution Vulnerability (CVE-2026-20163):

• CVSS: 8.0
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: High
• User Interaction: None
• Consequences: Gain Access

2. Splunk Enterprise Sensitive Information Disclosure Vulnerability (CVE-2026-20164):

• CVSS: 6.5
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Obtain Information