Splunk security advisory (AV26-356) – Canadian Centre for Cyber Security

Serial number: AV26-356
Date: April 15, 2026

On April 15, 2026, Splunk published security advisories to address vulnerabilities in the following products:

• Splunk Operator for Kubernetes Add-on – versions prior to 3.1.0
• Splunk MCP Server – versions prior to 1.0.3
• Splunk IT Service Intelligence (ITSI) – versions prior to 4.21.2
• Splunk Enterprise – multiple versions
• Splunk Cloud Platform – multiple versions

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.