Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Splunk Secure Gateway 3.10.11, 3.8.72, 3.9.25 Clear all filters
TI-2026-69304 CVE-2026-76280 · GHSA-6m62-fm79-mhx9

Incorrect Permission Assignment in Splunk Secure Gateway KV Store Collections

Priority LOW 27

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, an authenticated user who does not hold the "admin" or "sc_admin" Splunk role…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00225 Published 2026-10-07 Fixed in 10.4.3, 10.2.7 +5 CWE-732
TI-2026-69296 CVE-2026-76272 · GHSA-8rx4-3877-qpv7

Missing authorization in Splunk Secure Gateway lets users sign data

Priority LOW 19

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could cause Splunk Secure Gateway to sign attacker-controlled payloads.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00216 Published 2026-10-07 Fixed in 10.4.3, 10.2.7 +5 CWE-862
TI-2026-69289 CVE-2026-76265 · GHSA-grm2-hfh8-7h22

Improper access control in Splunk Secure Gateway REST API endpoints

Priority LOW 29

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, a user who does not hold the "admin" or "power" Splunk roles could access pri…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00301 Published 2026-10-07 Fixed in 10.4.3, 10.2.7 +5 CWE-284