Deserialization in Splunk Mcp Server App
CVE-2026-76404
In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is possible because of missing input validation in the app's credential management component, which deserializes stored data without checking whether the content is of the expected type.
Vulnerability class: Insecure Deserialization
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-76404?
- CVE-2026-76404 is a critical-severity vulnerability in Splunk Mcp Server App, classified under Deserialization of Untrusted Data. CVSS score: 9.1/10. Published 2026-08-19.
- How severe is CVE-2026-76404?
- Critical severity. CVSS v3 base score is 9.1 out of 10.