Splunk Enterprise

2 results · Clear filters · Feed

• Critical 9.8
  CVE-2026-76268 Public exploit Scanner template

  Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise

  In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Programming Interface (API) on a search head cluster member could execute attacker-controlled …

  Splunk Splunk Enterprise
  Oct 7, 2026
• Critical 9.8
  CVE-2026-20253 Exploited Public exploit Scanner template EPSS 97%

  Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

  In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service endpo…

  Splunk Splunk Enterprise
  Jun 10, 2026

  KEV Jun 18, 2026