Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Secure Gateway 3.10.12, 3.8.73, 3.9.26 Clear all filters
TI-2026-79021 CVE-2026-76295 · GHSA-rmhg-vg9p-f52r

SPL injection through the REST API in Splunk Secure Gateway

Priority LOW 20

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a user who does not hold the "admin" or "power" Splunk roles could view dashb…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0028 Published 2026-10-21 Fixed in 10.4.4, 10.2.8 +5 CWE-943
TI-2026-79018 CVE-2026-76292 · GHSA-42f3-xxmj-h2v2

Missing authorization in Splunk Secure Gateway exposes alert data

Priority LOW 29

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a low-privileged user that does not hold the "admin" Splunk role or the "sc_a…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00336 Published 2026-10-21 Fixed in 10.4.4, 10.2.8 +5 CWE-862