Splunk security advisory (AV26-708)

[MalBot]

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>

        <div><p><strong>Serial number: </strong>AV26-708<br /><strong>Date: </strong>July 16, 2026</p>

On July 15, 2026, Splunk published security advisories to address vulnerabilities in the following products. Included were critical updates for the following:

• Splunk Enterprise – multiple versions and platforms
• Splunk Cloud Platform – multiple versions and platforms

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise
• Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise
• Third-Party Package Updates in Splunk Enterprise - July 2026
• Splunk Security Advisories

</div>

Article Link: Splunk security advisory (AV26-708) - Canadian Centre for Cyber Security