Splunk Splunk Secure Gateway vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20254
3. 202613

Newest CVEs

• CVE-2026-76295

  SPL Injection through the REST API in Splunk Secure Gateway

  Splunk · Splunk Enterprise

  Medium4.3
• CVE-2026-76292

  Missing Authorization through REST API Endpoints in Splunk Secure Gateway

  Splunk · Splunk Enterprise

  Medium6.5
• CVE-2026-76280

  Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway

  Splunk · Splunk Enterprise

  Medium6.3
• CVE-2026-76272

  Missing Access Control through the REST API in Splunk Secure Gateway

  Splunk · Splunk Enterprise

  Medium4.3
• CVE-2026-76265

  Improper Access Control through REST API Endpoints in Splunk Secure Gateway

  Splunk · Splunk Enterprise

  Medium6.5
• CVE-2026-76351

  Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway

  Splunk · Splunk Enterprise

  High8.8
• CVE-2026-76347

  Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway

  Splunk · Splunk Enterprise

  Medium5.4
• CVE-2026-76327

  SPL Injection through Splunk Web in Splunk Secure Gateway

  Splunk · Splunk Enterprise

  Medium6.4
• CVE-2026-76261

  Insecure Default Access Control List through the REST API in Splunk Secure Gateway

  Splunk · Splunk Enterprise

  Medium5.3
• CVE-2026-76258

  Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway

  Splunk · Splunk Enterprise

  Medium6.5