Splunk Products Multiple Vulnerabilities
Release Date: 22 Oct 2026
Multiple vulnerabilities were identified in Splunk products.
A remote attacker could exploit some of these vulnerabilities to trigger denial
of service condition, security restriction bypass, sensitive information
disclosure, remote code execution and data manipulation on the targeted system.
Impact
- Remote
Code Execution
- Denial
of Service
- Information
Disclosure
- Security
Restriction Bypass
- Data
Manipulation
System / Technologies affected
- Splunk
Enterprise 9.4 versions 9.4.0 to 9.4.15
- Splunk
Enterprise 10.0 versions 10.0.0 to 10.0.10
- Splunk
Enterprise 10.2 versions 10.2.0 to 10.2.7
- Splunk
Enterprise 10.4 versions 10.4.0 to 10.4.3
Solutions
Before installation of the software, please visit the
vendor web-site for more details.
Apply fixes issued by the vendor:
- https://advisory.splunk.com/advisories/SVD-2026-1007
- https://advisory.splunk.com/advisories/SVD-2026-1008
Vulnerability Identifier
- CVE-2026-76287
- CVE-2026-76288
- CVE-2026-76289
- CVE-2026-76290
- CVE-2026-76291
- CVE-2026-76292
- CVE-2026-76293
- CVE-2026-76294
- CVE-2026-76295
- CVE-2026-76296
- CVE-2026-76297
- CVE-2026-76298
- CVE-2026-76299
- CVE-2026-76300
- CVE-2026-76301
- CVE-2026-76302
Source
Related Link
- https://advisory.splunk.com/advisories/SVD-2026-1007
- https://advisory.splunk.com/advisories/SVD-2026-1008
沒有留言:
發佈留言