Splunk, a publicly owned company headquartered in the United States, is a subsidiary of Cisco. It employs approximately 8,740 individuals and reported $4.2B in revenue as of 2024. The company specializes in software development, providing customers with a unified security and observability platform.
Splunk recently patched 22 vulnerabilities in Splunk Enterprise, including a critical flaw with a CVSSv3.1 score of 9.8. The company described these fixes in advisories SVD-2026-1001 and SVD-2026-1002, both published on October 7, 2026, which together cover 22 CVE identifiers. These patches address multiple critical- and high-severity vulnerabilities in Splunk's products, some of which could lead to arbitrary code execution. Earlier on October 8, 2026, reports highlighted the Splunk Model Context Protocol (MCP) Server, which reached General Availability in Q1 2026. This server grants AI agents direct protocol-level access to enterprise observability data, including logs and alerts. The MCP protocol itself boasts over 500 million monthly SDK downloads and nearly 16,000 public servers, raising discussions about how this observability layer could become an attack surface due to a protocol vulnerability.
Splunk's customers primarily consist of telecoms and software Development companies. Examples of Splunk's customers include Vodafone, Autodesk and Nice.
Subscribe for full access to Splunk's products in full detail 
