Skip to content
OpenAdvisories

Product · Splunk

Splunk Connect for Kafka

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    CVE-2026-76403

    Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka

    In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol (HTTP) Event Collector…

    Splunk Splunk Connect for Kafka
  • High 8.2
    CVE-2026-76402

    Server-Side Request Forgery (SSRF) through the REST API in Splunk Connect for Kafka

    In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure a non-secure Hypertext Transfer Protocol (HTTP) Event Collector endpoint in Splunk Enterprise …

    Splunk Splunk Connect for Kafka