DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Splunk Enterprise: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-10-07
Ein Angreifer kann mehrere Schwachstellen in Splunk Enterprise ausnutzen, um beliebigen Code auszuführen – einschließlich Betriebssystembefehle mit Root-Rechten –, erweiterte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, SQL-Injection durchzuführen sowie Daten zu manipulieren oder offenzulegen.
01
beschreibt (22)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-76285US | critical9.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha… | ||||
| CVE-2026-76284US | — | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha… | ||||
| CVE-2026-76283US | — | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha… | ||||
| CVE-2026-76282US | — | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha… | ||||
| CVE-2026-76281US | — | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha… | ||||
| CVE-2026-76280US | medium6.3 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, an authenticated user who does not ho… | ||||
| CVE-2026-76279US | medium4.3 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processing Language (… | ||||
| CVE-2026-76278US | medium4.3 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the edit_spl2_module_permissions capability could use the affected Representational S… | ||||
| CVE-2026-76277US | medium4.1 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create a native Splunk username that ends with… | ||||
| CVE-2026-76276US | medium4.3OT erhöht | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could retrieve original source code fo… | ||||
| CVE-2026-76275US | medium4.3 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could access search query text and job metadat… | ||||
| CVE-2026-76274US | medium6.5 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_content capability could redirect an outbound request from Splunk App f… | ||||
| CVE-2026-76273US | medium4.3 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processing Language (… | ||||
| CVE-2026-76272US | medium4.3OT erhöht | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could cause Splunk Secure Gateway to sign atta… | ||||
| CVE-2026-76271US | medium6.5 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause a denial of service agains… | ||||
| CVE-2026-76270US | medium6.5 | — | ||
In Splunk Enterprise versions below 10.4.3, a user that holds a role with the list_spl2_modules capability could use SQL injection in SPL2 module filtering to access all relevant d… | ||||
| CVE-2026-76269US | medium6.5 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could use a user-controlled job identifier to… | ||||
| CVE-2026-76268US | critical9.8OT hoch | Exploit | ||
In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Programming Int… | ||||
| CVE-2026-76267US | medium4.3 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_content capability could inject forged entries into the app log through… | ||||
| CVE-2026-76266US | high7.7 | — | ||
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could cause an aff… | ||||
20 von 22 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan