Multiple Vulnerabilities in Splunk Products

THREAT INTELLIGENCE

Peer Review

4.8

Proven Trust

Dark blue circle with two overlapping checkmarks, one green and one light blue.

ISO 27001 text with a globe outline symbol on a black background.

2025 winner badge for Cyber Security Excellence Awards with gold and black design.

Critical

CVE-2026-76299, CVE-2026-76302, CVE-2026-76298

Splunk

October 22, 2026

Executive Summary

Sixteen CVEs; CVE-2026-76299 and CVE-2026-76302 score CVSS 9.9, while externally reported CVE-2026-76298 scores 8.8.

Key Details

Affected Platform

Splunk

Attack Surface

Recommended Action

Apply vendor patch

Affected Environment

Splunk Enterprise below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Secure Gateway below 3.10.12, 3.9.26, and 3.8.73.

Operational Impact

OS command execution as the Splunk service account, authorisation bypass, data read or deletion, and Splunk Web outages requiring restart.

Technical Root Cause

Hard-coded key derivation, missing authorisation, improper access control, unsafe expression evaluation, missing SPL safeguards, and unbounded resource use.

Recommended Mitigation

Upgrade Splunk Enterprise to 10.4.4, 10.2.8, 10.0.11, or 9.4.16; Edge Processor users must enable package download authentication.

Concerned about your exposure?

Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.

Discuss Your Security Exposure Explore MDR for Splunk

Assess your risk

Identify affected systems

Plan remediation

Practical, vendor-aligned guidance

Get expert support

From our 24/7 security team

Stay ahead of emerging threats

Get the latest threat intelligence and security advisories from Smarttech247.

Full Technical Report

Download the complete analysis, including detailed technical findings and references.

Download Full Report (PDF)

References

Splunk advisories SVD-2026-1007 and SVD-2026-1008.