Vulnerabilities
Splunk Delays Security Advisories to October 7, 2026 – Update on Enterprise, Forwarder, AWS Add‑On, MCP Server
Splunk PSIRT has postponed the release of its September 16, 2026 vulnerability advisories to October 7, 2026. The advisories will cover Splunk Enterprise, Universal Forwarder, AWS Add‑On, and MCP Server. Defenders should download and install the latest versions of these products immediately.
What Happened
Splunk’s Product Security Incident Response Team (PSIRT) announced that the advisories originally scheduled for September 16, 2026 will now be published on October 7, 2026.
Products Affected
- Splunk Enterprise
- Splunk Universal Forwarder
- Splunk Add‑on for Amazon Web Services
- Splunk MCP Server
Impact
These advisories will disclose one or more vulnerabilities that could potentially allow attackers to gain unauthorized access, execute code, or exfiltrate data from the affected Splunk components.
Recommended Actions
- Verify the current version of each product installed on your infrastructure.
- Download the latest patch or release from the official Splunk download portal.
- Apply the updates following your organization’s change‑management procedures.
- Validate the upgrade by checking the version number and reviewing the release notes for the applied fix.
Next Steps
Splunk advises all customers to monitor the PSIRT mailing list for the detailed advisory once it is released on October 7, 2026.
Related vulnerabilities
Splunk Issues Security Hardening Release for Multiple Apps and Add-ons (SVD-2026-0808)
Splunk has published a security hardening advisory addressing multiple vulnerabilities affecting several enterprise apps and add-ons, including the Splunk AI Toolkit and Cisco Talos Intelligence integration. Defenders must review the advisory details and update affected components immediately to mitigate high-severity risks such as RCE and SSRF.
Read briefing
Splunk Secure Gateway RCE via Unsafe Deserialization (SVD-2026-0601)
A low‑privileged user can execute arbitrary code on Splunk Enterprise and Cloud Platform instances by sending crafted JSON to the Secure Gateway app. The flaw exists in Splunk versions prior to 10.2.4, 10.0.7, 9.4.12, 9.3.13, and corresponding Cloud and Secure Gateway releases. Defenders should upgrade immediately or apply the vendor’s patch and restrict access to the Secure Gateway app.
Read briefing
Microsoft Updates Fixed Version Details for CVE-2026-59113 in Dynamics 365 Server
Microsoft has corrected the remediation details for CVE-2026-59113, a remote code execution vulnerability impacting Visual Studio Code integrations within Dynamics 365 Server on-premises. SecOps and sysadmins should note that the actual patch is bundled in Dynamics 365 Server v9.1 Update 1.45 rather than version 6.2. Defenders need to verify their deployment builds against the updated advisories to ensure proper mitigation.
Read briefing
Cisco PSIRT Unveils Batch of Critical & Medium Vulnerabilities – Immediate Patch Required
On Aug. 19 2026, Cisco’s PSIRT released a suite of advisories covering 12 CVEs across Crosswork, Secure Workload, BroadWorks, Unified Intelligence Center, RoomOS, Industrial Ethernet 1000 Series, and Contact Center products. Four critical (CVSS 10.0) affect Crosswork and Secure Workload hardening releases, while a high‑severity XML‑External‑Entity flaw hits BroadWorks. Medium‑rated issues include SQL injection, stack overflow, XSS, DoS, and server‑side request forgery. Cisco urges customers to deploy the fixed builds immediately and notes updates to its vulnerability disclosure process.
Read briefing