Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Secure Gateway 3.10.10, 3.8.71, 3.9.24 Clear all filters
TI-2026-53358 CVE-2026-76258 · GHSA-3mh4-7c3j-c9mg

Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway

Priority LOW 29

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.10, 3.9.24, and 3.8.71, a user who does not hold the "admin" or "power" Splunk roles could register an…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0034 Published 2026-08-19 Fixed in 10.4.2, 10.2.6 +5 CWE-321
TI-2026-53357 CVE-2026-76257 · GHSA-pxp8-rwm8-6fq3

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

Priority LOW 29

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.10, 3.9.24, and 3.8.71, a user who holds a Splunk role with permissions to list storage passwords but…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0034 Published 2026-08-19 Fixed in 10.4.2, 10.2.6 +5 CWE-862