CVE-2026-76347

Splunk Secure Gateway's Report Notifications REST API fails to validate notification path values before sending system-authenticated internal requests, allowing non-admin users to trigger SSRF, alter Search Head Cluster state, and cause denial of service. Affected versions: Splunk Enterprise belo...

CVE-2026-76347: Server-Side Request Forgery (SSRF)

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could use Server-Side Request Forgery SSRF in report notifications to send system-authenticated...

PT-2026-78774

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Splunk Secure Gateway versions prior to 3.10.9 Splunk Secure Gateway...

CVE-2024-54792

creationtimestamp| type| source ---|---|--- 2025-01-18 22:00:06+00:00| published-proof-of-concept| Telegram/x09wf5BV-L38GDGdLKlPPES7jGx8v3mUPVSlknfUHbTZ6U 2025-01-21 18:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbhid5s5m2j 2025-01-22 21:02:01+00:00| seen|...

CVE-2024-56779

creationtimestamp| type| source ---|---|--- 2025-01-08 18:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfarhetlg62l 2025-01-08 18:22:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113794125484036956 2025-01-08 19:59:58+00:00| seen|...

CVE-2025-22316

creationtimestamp| type| source ---|---|--- 2025-01-07 11:17:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jmgx33b2k 2025-01-07 11:17:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jmgx33b2k 2025-01-07 14:10:23+00:00| seen|...