Index

Search

Search the public record. Drafts and scheduled notes are not included.

news

Splunk Enterprise Patroni flaw CVE-2026-76268 allows unauthenticated RCE

Splunk fixed CVE-2026-76268 on 7 October 2026. Unauthenticated network access to the Patroni REST API on search head cluster members can lead to command execution. CVSS 3.1 9.8 (Critical, scored by Splunk). Fixed in 10.2.7 and 10.4.3. A third-party PoC is claimed. Not in CISA KEV.

Published 7h ago

CriticalPoC Available

CVE-2026-76268

Splunk Enterprise Patroni REST API missing authentication RCE

RCE

Published 8d ago