Mmastodon TechnologyCybersecurity first seen 17 h ago, last 17 h ago, peak #10

Critical Splunk vulnerability CVE-2026-76268 earns maximum severity score

Original: 🔴 CVE-2026-76268 - Critical (9.8) In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with ne

A critical vulnerability, CVE-2026-76268, has been disclosed in Splunk Enterprise versions below 10.4.3 and 10.2.7. The flaw, scored 9.8, allows an unauthenticated attacker with network access to the Patroni REST API on a search head cluster member to execute arbitrary code. Security teams are urged to patch affected deployments immediately.

Why now: Security professionals are sharing the alert so administrators patch vulnerable Splunk instances before exploitation.

SplunkCVE-2026-76268Patroni

Open on mastodon →

Evidence

• 🔴 CVE-2026-76268 - Critical (9.8) In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Programming Interface (API) on a search head cluster member could execute… · thehackerwire

API: https://socialmediatrends-api.osmike.com/v1/trends/1407444