Reported by 2 outlets
Splunk Fixes 17 Vulnerabilities Including Critical MCP Server RCE
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 1.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.58 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Splunk Fixes 17 Vulnerabilities Including Critical MCP Server RCE
gbhackers.com · 54d ago · August 20th, 2026
Splunk has released a security hardening update addressing 17 vulnerabilities across several applications and add-ons, including a critical remote code execution (RCE) flaw in the Splunk MCP Server app. The vulnerabilities encompass deserialization, access control, server-side request forgery (SSRF), denial-of-service, certificate validation, and information disclosure. Tracked as SVD-2026-0808 and published on August 19, 2026, the […] The post Splunk Fixes 17 Vulnerabilities Including Critical MCP Server RCE appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from cyberpress.org
Splunk Fixes Critical MCP Server RCE and Multiple AI Toolkit Vulnerabilities
cyberpress.org · 54d ago · August 20th, 2026
Splunk has released security fixes for five apps and add-ons, addressing a critical remote code execution flaw in its MCP Server app and a wide range of privilege-management , authorization, deserialization, and data-exposure weaknesses in the Splunk AI Toolkit. The August 19 security hardening advisory, tracked as SVD-2026-0808, carries a maximum CVSS v3.1 score of 9.1. The most severe issue, CVE-2026-76404, affects Splunk MCP Server app versions earlier than 1.2.1. The vulnerability allows a user with the Splunk “admin” role to execute arbitrary operating-system commands. Splunk attributed the flaw to insufficient input validation in the credential-management component, which deserializes stored data without ensuring it is the expected type. Splunk Fixes Multiple Vulnerabilities Tracked as CWE-502, or deserialization of untrusted data, the issue can enable malicious serialized content to trigger command execution on the host running Splunk. The vulnerability has a CVSS vector of AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H , reflecting that exploitation requires administrative Splunk access but could result in complete compromise. Splunk AI Toolkit received the largest group of fixes. CVE-2026-76391 and CVE-2026-76394, both rated 8.3, could allow low-privileged users to run searches with system-level privileges or manage containers and connection data via insufficiently protected REST API handlers.