Splunk Enterprise and SOAR need updates, Cyber Centre says
Original title: Splunk security advisory (AV26-1077)
Canadian Cyber Centre alert AV26-1077, dated October 22, points to October 2026 Splunk hardening and SOAR vulnerability notices.
As of October 21, 2026, the Canadian Centre for Cyber Security says Splunk Enterprise and Splunk SOAR are affected by vulnerabilities. Enterprise builds before 10.0.11, 10.2.8, 10.4.4 and 9.4.16, and SOAR before 8.7.0, are listed. The centre urges administrators to review the linked Splunk notices and apply necessary updates. No CVE identifiers or exploitation status appear in the alert.
Unconfirmed: The alert does not name CVE identifiers, severity or exploitation status.
- Serial number is AV26-1077, dated October 22, 2026.
- Splunk Enterprise fixes cited are 10.0.11, 10.2.8, 10.4.4 and 9.4.16.
- Splunk SOAR is affected prior to 8.7.0.
- Linked notices cover Enterprise hardening and SOAR vulnerabilities for October 2026.
| Product | Affected | Fixed in |
|---|---|---|
| Splunk Enterprise | Prior to 10.0.11, 10.2.8, 10.4.4 and 9.4.16 | 10.0.11, 10.2.8, 10.4.4, 9.4.16 |
| Splunk SOAR | Prior to 8.7.0 | 8.7.0 |
- 1.Review the linked Splunk advisories and apply available updates.
- Vendors
- Splunk
- Products
- Splunk EnterpriseSplunk SOAR
- Organizations
- Canadian Centre for Cyber Security
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1077 Date: October 22, 2026 As of October 21, 2026, Splunk is affected by vulnerabilities in the following products: Splunk Enterprise Prior to 10. 0. 11 Prior to 10.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.