CVE-2026-76262

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:29+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-20 11:08:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtj47awptr2l 2026-08-20 11:08:35+00:00|...

CVE-2026-76262

CVE-2026-76262 affects Splunk Enterprise 10.4 versions below 10.4.2 . The Edge Processor SPL2 Preview sidecar exposes its Prometheus metrics endpoint without authentication, allowing any unauthenticated network client to retrieve runtime and build metadata for the sidecar. The vulnerability is li...

CVE-2026-76262 Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise

In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including service details that expose relevant runtime and build metadata for the sidecar. The vulnerability does not affect Splunk Enterpri...