CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-76265

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, a user who does not hold the "admin" or "power" Splunk roles could access privileged Splunk Secure Gateway functionality. With this access, the user could cause Splunk Secure Gateway to sign attacker-controlled payloads. The vulnerability is possible because multiple Splunk Secure Gateway Representational State Transfer (REST) API endpoints do not enforce authorization requirements before processing requests.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 13.3%

CVSS Severity

CVSS v3 Score 6.5

References

https://advisory.splunk.com/advisories/SVD-2026-1001

Products affected by CVE-2026-76265

Splunk » Splunk » Version: 10.0.0

cpe:2.3:a:splunk:splunk:10.0.0
Splunk » Splunk » Version: 10.0.1

cpe:2.3:a:splunk:splunk:10.0.1
Splunk » Splunk » Version: 10.0.2

cpe:2.3:a:splunk:splunk:10.0.2
Splunk » Splunk » Version: 10.0.3

cpe:2.3:a:splunk:splunk:10.0.3
Splunk » Splunk » Version: 10.0.4

cpe:2.3:a:splunk:splunk:10.0.4
Splunk » Splunk » Version: 10.0.5

cpe:2.3:a:splunk:splunk:10.0.5
Splunk » Splunk » Version: 10.0.7

cpe:2.3:a:splunk:splunk:10.0.7
Splunk » Splunk » Version: 10.0.8

cpe:2.3:a:splunk:splunk:10.0.8
Splunk » Splunk » Version: 10.0.9

cpe:2.3:a:splunk:splunk:10.0.9
Splunk » Splunk » Version: 10.2.0

cpe:2.3:a:splunk:splunk:10.2.0
Splunk » Splunk » Version: 10.2.1

cpe:2.3:a:splunk:splunk:10.2.1
Splunk » Splunk » Version: 10.2.2

cpe:2.3:a:splunk:splunk:10.2.2
Splunk » Splunk » Version: 10.2.4

cpe:2.3:a:splunk:splunk:10.2.4
Splunk » Splunk » Version: 10.2.5

cpe:2.3:a:splunk:splunk:10.2.5
Splunk » Splunk » Version: 10.2.6

cpe:2.3:a:splunk:splunk:10.2.6
Splunk » Splunk » Version: 10.4.0

cpe:2.3:a:splunk:splunk:10.4.0
Splunk » Splunk » Version: 10.4.1

cpe:2.3:a:splunk:splunk:10.4.1
Splunk » Splunk » Version: 10.4.2

cpe:2.3:a:splunk:splunk:10.4.2
Splunk » Splunk Secure Gateway » Version: 3.10.0

cpe:2.3:a:splunk:splunk_secure_gateway:3.10.0
Splunk » Splunk Secure Gateway » Version: 3.10.10

cpe:2.3:a:splunk:splunk_secure_gateway:3.10.10
Splunk » Splunk Secure Gateway » Version: 3.10.6

cpe:2.3:a:splunk:splunk_secure_gateway:3.10.6
Splunk » Splunk Secure Gateway » Version: 3.10.9

cpe:2.3:a:splunk:splunk_secure_gateway:3.10.9
Splunk » Splunk Secure Gateway » Version: 3.9.0

cpe:2.3:a:splunk:splunk_secure_gateway:3.9.0
Splunk » Splunk Secure Gateway » Version: 3.9.10

cpe:2.3:a:splunk:splunk_secure_gateway:3.9.10
Splunk » Splunk Secure Gateway » Version: 3.9.20

cpe:2.3:a:splunk:splunk_secure_gateway:3.9.20
Splunk » Splunk Secure Gateway » Version: 3.9.23

cpe:2.3:a:splunk:splunk_secure_gateway:3.9.23
Splunk » Splunk Secure Gateway » Version: 3.9.24

cpe:2.3:a:splunk:splunk_secure_gateway:3.9.24

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-76265

Products

Pricing

Contact Us