Security vendor · SIEM · in CISA KEV
Splunk in the CISA KEV catalog
CISA’s Known Exploited Vulnerabilities catalog lists 1 entry for Splunk as of catalog version 2026.11.06, released November 6, 2026. The newest was added June 18, 2026, and the latest federal due date is June 21, 2026.
Updated
- entry in the catalog
- 1
- newest addition
- June 18, 2026
- latest federal due date
- June 21, 2026
- marked known ransomware use
- 0
Directory record
- Website
- www.splunk.com
- Categories
- SIEM (primary), SOAR and security automation, Security data lakes and pipelines
- Headquarters
- San Jose, United States
- Founded
- 2003
- Ownership
- Owned by Cisco
- Company record
- Splunk on CISO Tribune
Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.
KEV entries, newest first
Filed by CISA under the name “Splunk”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.
Added June 18, 2026
CVE-2026-20253 Splunk Enterprise Missing Authentication for Critical Function Vulnerability
Enterprise
Due June 21, 2026
Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.
On Daily CISO, newest first
No briefing or archive item names Splunk yet. Every item about a security vendor is on the vendor news page.
Sources
- Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
- Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
- CISO Tribune, vendor directory record for Splunk, published November 8, 2026