DeutschShown in its original language — a full translation is planned for a future version.
Splunk Splunk Enterprise: Mehrere Schwachstellen
view advisory published 2026-08-19
Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, SQL-Injection-, serverseitige Request-Forgery- und Cross-Site-Scripting-Angriffe durchzuführen, sensible Informationen offenzulegen oder zu manipulieren, Denial-of-Service-Zustände auszulösen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
01
describes (93)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-76355US | high7.5OT elevated | — | ||
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the information contained in Edge Processor pipeline configurations through a Representation… | ||||
| CVE-2026-76354US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could affect system integrity and availability… | ||||
| CVE-2026-76353US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could submit a crafted knowledge bundle delta t… | ||||
| CVE-2026-76352US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could create or modify a scripted lookup throug… | ||||
| CVE-2026-76351US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or… | ||||
| CVE-2026-76350US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could configure Portable Document Format (PDF)… | ||||
| CVE-2026-76349US | — | — | ||
In Splunk Enterprise versions below 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated user into running arbitrary Search Processing Language (SPL) co… | ||||
| CVE-2026-76348US | —OT elevated | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds a Splunk role that contains the high-privilege list_search_head_clustering capability could… | ||||
| CVE-2026-76347US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or… | ||||
| CVE-2026-76346US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a malicious script in dashboard sparkline format option… | ||||
| CVE-2026-76345US | — | — | ||
In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can manage search head clustering could use the search head cluster member bundle Represen… | ||||
| CVE-2026-76344US | high7.7 | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could write dispatch metadata to an arbitrary l… | ||||
| CVE-2026-76343US | medium6.5 | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Query… | ||||
| CVE-2026-76342US | medium5.4OT elevated | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store risky Search Processing Language (SPL) commands in a Ta… | ||||
| CVE-2026-76341US | medium5.4OT elevated | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store attacker-controlled Search Processing Language (SPL) in… | ||||
| CVE-2026-76340US | medium5.3OT elevated | — | ||
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could cause Splunk Enterprise to reload token-signing keys through the Representational State Transfer (RES… | ||||
| CVE-2026-76339US | medium5.4 | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could inject arbitrary Search Processing Langua… | ||||
| CVE-2026-76338US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has access to a trusted distributed search private key could forge an administra… | ||||
| CVE-2026-76337US | medium5.3 | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could read JavaScript files outside the Splunk Web static directory. The vulnerabili… | ||||
| CVE-2026-76336US | high7.1OT elevated | — | ||
In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "power" Splunk roles could delete all Search Processing Language 2 (SPL2) modules acr… | ||||
showing 20 of 93
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:66521 vom 2026-09-11external
- Red Hat Security Advisory RHSA-2026:67836 vom 2026-09-24external
- Red Hat Security Advisory RHSA-2026:70870 vom 2026-09-23external
- Red Hat Security Advisory RHSA-2026:83013 vom 2026-10-14external
- SVD-2026-0801: Security Hardening Release for Splunk Enterprise - August 2026 vom 2026-08-19external
- SVD-2026-0802: Third-Party Package Updates in Splunk Enterprise - August 2026 vom 2026-08-19external
- WID-SEC-W-2026-2929 - CSAF Versionself
- WID-SEC-2026-2929 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan