DeutschShown in its original language — a full translation is planned for a future version.
Splunk Enterprise: Mehrere Schwachstellen
view advisory published 2026-10-07
Ein Angreifer kann mehrere Schwachstellen in Splunk Enterprise ausnutzen, um beliebigen Code auszuführen – einschließlich Betriebssystembefehle mit Root-Rechten –, erweiterte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, SQL-Injection durchzuführen sowie Daten zu manipulieren oder offenzulegen.
01
describes (22)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-76285US | critical9.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha… | ||||
| CVE-2026-76284US | — | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha… | ||||
| CVE-2026-76283US | — | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha… | ||||
| CVE-2026-76282US | — | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha… | ||||
| CVE-2026-76281US | — | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha… | ||||
| CVE-2026-76280US | medium6.3 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, an authenticated user who does not ho… | ||||
| CVE-2026-76279US | medium4.3 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processing Language (… | ||||
| CVE-2026-76278US | medium4.3 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the edit_spl2_module_permissions capability could use the affected Representational S… | ||||
| CVE-2026-76277US | medium4.1 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create a native Splunk username that ends with… | ||||
| CVE-2026-76276US | medium4.3OT elevated | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could retrieve original source code fo… | ||||
| CVE-2026-76275US | medium4.3 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could access search query text and job metadat… | ||||
| CVE-2026-76274US | medium6.5 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_content capability could redirect an outbound request from Splunk App f… | ||||
| CVE-2026-76273US | medium4.3 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processing Language (… | ||||
| CVE-2026-76272US | medium4.3OT elevated | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could cause Splunk Secure Gateway to sign atta… | ||||
| CVE-2026-76271US | medium6.5 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause a denial of service agains… | ||||
| CVE-2026-76270US | medium6.5 | — | ||
In Splunk Enterprise versions below 10.4.3, a user that holds a role with the list_spl2_modules capability could use SQL injection in SPL2 module filtering to access all relevant d… | ||||
| CVE-2026-76269US | medium6.5 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could use a user-controlled job identifier to… | ||||
| CVE-2026-76268US | critical9.8OT high | Exploit | ||
In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Programming Int… | ||||
| CVE-2026-76267US | medium4.3 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_content capability could inject forged entries into the app log through… | ||||
| CVE-2026-76266US | high7.7 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could cause an aff… | ||||
showing 20 of 22
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan