Read the docs

Splunk

Records451All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical34CVSS 9.0–10.0
CVSS high165CVSS 7.0–8.9

Exploited now

Splunk records in CISA KEV
TI-2026-16444 Splunk Enterprise Missing Authentication for Critical Function Vulnerability Priority CRITICAL 100KEV 2026-06-18TI-2014-00154 OpenSSL Information Disclosure Vulnerability Priority CRITICAL 90KEV 2022-05-04

Components

Products in the NVD configurations · select one to filter the records
Splunk 298 records CRITICAL Splunk Cloud Platform 109 records HIGH Universal Forwarder 61 records HIGH Soar 18 records LOW Splunk Secure Gateway 17 records MEDIUM Ai Toolkit 12 records MEDIUM Cloud 9 records HIGH Connect For Kafka 4 records MEDIUM

Records

4 records in Connect For Kafka · all components

TI-2026-53457 CVE-2026-76402 · GHSA-mrh3-68v8-xhgq

Server-Side Request Forgery (SSRF) through the REST API in Splunk Connect for Kafka

Priority MEDIUM 42

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure a non-secure Hypertext Transfer Protocol (HTTP) Event C…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00414 Published 2026-08-19 Fixed in 2.2.7 CWE-918
TI-2026-53458 CVE-2026-76403 · GHSA-xf48-ph6x-76rj

Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka

Priority LOW 34

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext T…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00244 Published 2026-08-19 Fixed in 2.2.7 CWE-295
TI-2026-53456 CVE-2026-76401 · GHSA-9w75-cvch-h753

Regular Expression Denial of Service (DoS) through the REST API in Splunk Connect for Kafka

Priority LOW 27

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure timestamp extraction with a crafted regular expression…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00381 Published 2026-08-19 Fixed in 2.2.7 CWE-407
TI-2026-53455 CVE-2026-76400 · GHSA-hrxg-3jgf-4mh5

Denial of Service (DoS) through the REST API in Splunk Connect for Kafka

Priority LOW 27

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API and influence responses from a Hypertext Transfer Protocol (HTTP) Event…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00381 Published 2026-08-19 Fixed in 2.2.7 CWE-400
Open these records in search →