CVE-2026-76268

In Splunk Enterprise versions below 10.4.3 and 10.2.7 , a missing authentication flaw in the Patroni REST API allows an unauthenticated network attacker to execute arbitrary operating-system commands on a search head cluster member. The root cause is the lack of authentication requirements for cr...

EUVD-2026-94620

In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer REST Application Programming Interface API on a search head cluster member could execute attacker-controlled operating-system commands. The vulnerabili...

PT-2026-107690

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Description An unauthenticated user with network access to the Patroni REST API on a search head cluster member can execute arbitrary operating-system...