Splunk Patches 22 Vulnerabilities, Including Critical Flaw With CVSS 9.8
ID: d8e6a038-e074-5596-bf23-43d5175a579c
STIX ID: report--d8e6a038-e074-5596-bf23-43d5175a579c
Feed Name: The Cyber Express
Threat Score
Splunk published advisories SVD-2026-1001 and SVD-2026-1002 addressing 22 CVEs (CVE-2026-76264–CVE-2026-76285), including a critical CVSSv3.1 9.8 vulnerability in the Patroni REST API that can permit unauthenticated remote code execution on affected search head cluster members; the advisories list affected branches (10.4.x, 10.2.x, 10.0.x, 9.4.x), recommended fixed versions (10.4.3, 10.2.7, 10.0.10, 9.4.15), and mitigation steps for cases where upgrading is not immediately possible.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.