Warning: Multiple Vulnerabilities in Splunk Enterprise including critical RCE, Patch Immediately!

Splunk Enterprise has multiple security vulnerabilities disclosed by the vendor and CCB, including a critical unauthenticated remote command execution (CVE-2026-76268, CVSS 9.8) in the Patroni REST API and a high-severity local privilege escalation during package upgrades (CVE-2026-76266, CVSS 7.7). The advisory lists fixed Splunk versions to install, additional configuration mitigations for several medium-severity issues, and recommends enhanced monitoring and incident reporting while noting that patching does not remediate past compromises.