Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Splunk Component: Connect For Kafka Clear all filters
TI-2026-53458 CVE-2026-76403 · GHSA-xf48-ph6x-76rj

Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka

Priority LOW 34

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext T…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00244 Published 2026-08-19 Fixed in 2.2.7 CWE-295
TI-2026-53457 CVE-2026-76402 · GHSA-mrh3-68v8-xhgq

Server-Side Request Forgery (SSRF) through the REST API in Splunk Connect for Kafka

Priority MEDIUM 42

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure a non-secure Hypertext Transfer Protocol (HTTP) Event C…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00414 Published 2026-08-19 Fixed in 2.2.7 CWE-918
TI-2026-53456 CVE-2026-76401 · GHSA-9w75-cvch-h753

Regular Expression Denial of Service (DoS) through the REST API in Splunk Connect for Kafka

Priority LOW 27

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure timestamp extraction with a crafted regular expression…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00381 Published 2026-08-19 Fixed in 2.2.7 CWE-407
TI-2026-53455 CVE-2026-76400 · GHSA-hrxg-3jgf-4mh5

Denial of Service (DoS) through the REST API in Splunk Connect for Kafka

Priority LOW 27

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API and influence responses from a Hypertext Transfer Protocol (HTTP) Event…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00381 Published 2026-08-19 Fixed in 2.2.7 CWE-400