Splunk Products Multiple Vulnerabilities
Release Date: 9 Oct 2026
Multiple vulnerabilities were identified in Splunk products.
A remote attacker could exploit some of these vulnerabilities to trigger data
manipulation, denial of service condition, elevation of privilege, security
restriction bypass, sensitive information disclosure and remote code execution
on the targeted system.
Impact
- Remote
Code Execution
- Denial
of Service
- Information
Disclosure
- Elevation
of Privilege
- Security
Restriction Bypass
- Data
Manipulation
System / Technologies affected
- Splunk
Enterprise 9.4 versions 9.4.0 to 9.4.14
- Splunk
Enterprise 10.0 versions 10.0.0 to 10.0.9
- Splunk
Enterprise 10.2 versions 10.2.0 to 10.2.6
- Splunk
Enterprise 10.4 versions 10.4.0 to 10.4.2
Solutions
Before installation of the software, please visit the
vendor web-site for more details.
Apply fixes issued by the vendor:
- https://advisory.splunk.com/advisories/SVD-2026-1001
- https://advisory.splunk.com/advisories/SVD-2026-1002
Vulnerability Identifier
- CVE-2026-76264
- CVE-2026-76265
- CVE-2026-76266
- CVE-2026-76267
- CVE-2026-76268
- CVE-2026-76269
- CVE-2026-76270
- CVE-2026-76271
- CVE-2026-76272
- CVE-2026-76273
- CVE-2026-76274
- CVE-2026-76275
- CVE-2026-76276
- CVE-2026-76277
- CVE-2026-76278
- CVE-2026-76279
- CVE-2026-76280
- CVE-2026-76281
- CVE-2026-76282
- CVE-2026-76283
- CVE-2026-76284
- CVE-2026-76285
Source
Related Link
- https://advisory.splunk.com/advisories/SVD-2026-1001
- https://advisory.splunk.com/advisories/SVD-2026-1002
沒有留言:
發佈留言