DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Splunk Splunk Enterprise: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-08-19
Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, SQL-Injection-, serverseitige Request-Forgery- und Cross-Site-Scripting-Angriffe durchzuführen, sensible Informationen offenzulegen oder zu manipulieren, Denial-of-Service-Zustände auszulösen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
01
beschreibt (93)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-76355US | high7.5OT erhöht | — | ||
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the information contained in Edge Processor pipeline configurations through a Representation… | ||||
| CVE-2026-76354US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could affect system integrity and availability… | ||||
| CVE-2026-76353US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could submit a crafted knowledge bundle delta t… | ||||
| CVE-2026-76352US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could create or modify a scripted lookup throug… | ||||
| CVE-2026-76351US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or… | ||||
| CVE-2026-76350US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could configure Portable Document Format (PDF)… | ||||
| CVE-2026-76349US | — | — | ||
In Splunk Enterprise versions below 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated user into running arbitrary Search Processing Language (SPL) co… | ||||
| CVE-2026-76348US | —OT erhöht | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds a Splunk role that contains the high-privilege list_search_head_clustering capability could… | ||||
| CVE-2026-76347US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or… | ||||
| CVE-2026-76346US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a malicious script in dashboard sparkline format option… | ||||
| CVE-2026-76345US | — | — | ||
In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can manage search head clustering could use the search head cluster member bundle Represen… | ||||
| CVE-2026-76344US | high7.7 | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could write dispatch metadata to an arbitrary l… | ||||
| CVE-2026-76343US | medium6.5 | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Query… | ||||
| CVE-2026-76342US | medium5.4OT erhöht | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store risky Search Processing Language (SPL) commands in a Ta… | ||||
| CVE-2026-76341US | medium5.4OT erhöht | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store attacker-controlled Search Processing Language (SPL) in… | ||||
| CVE-2026-76340US | medium5.3OT erhöht | — | ||
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could cause Splunk Enterprise to reload token-signing keys through the Representational State Transfer (RES… | ||||
| CVE-2026-76339US | medium5.4 | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could inject arbitrary Search Processing Langua… | ||||
| CVE-2026-76338US | — | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has access to a trusted distributed search private key could forge an administra… | ||||
| CVE-2026-76337US | medium5.3 | — | ||
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could read JavaScript files outside the Splunk Web static directory. The vulnerabili… | ||||
| CVE-2026-76336US | high7.1OT erhöht | — | ||
In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "power" Splunk roles could delete all Search Processing Language 2 (SPL2) modules acr… | ||||
20 von 93 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Red Hat Security Advisory RHSA-2026:66521 vom 2026-09-11external
- Red Hat Security Advisory RHSA-2026:67836 vom 2026-09-24external
- Red Hat Security Advisory RHSA-2026:70870 vom 2026-09-23external
- Red Hat Security Advisory RHSA-2026:83013 vom 2026-10-14external
- SVD-2026-0801: Security Hardening Release for Splunk Enterprise - August 2026 vom 2026-08-19external
- SVD-2026-0802: Third-Party Package Updates in Splunk Enterprise - August 2026 vom 2026-08-19external
- WID-SEC-W-2026-2929 - CSAF Versionself
- WID-SEC-2026-2929 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan