CVE-2026-76262

In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including service details that expose relevant runtime and build metadata for the sidecar. The vulnerability does not affect Splunk Enterprise versions below 10.4. The information disclosure is possible because the Prometheus metrics endpoint in the Edge Processor SPL2 Preview sidecar lacks authentication, which lets any client that can reach the sidecar retrieve the metrics without credentials. For more information see About Splunk sidecars (https://help.splunk.com/en/splunk-enterprise/administer/admin-manual/10.4/splunk-sidecars/about-splunk-sidecars) in the Splunk documentation.

• CWE-200

• https://advisory.splunk.com/advisories/SVD-2026-0801Vendor Advisory

Published

Aug 19, 2026

Last Modified

Aug 26, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76257In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …6.5
• CVE-2026-76258In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …6.5
• CVE-2026-76259In Splunk Enterprise for Windows versions below 10.4.2, 10.2…7.8
• CVE-2026-7626The Slek Gateway for WooCommerce plugin for WordPress is vul…5.3
• CVE-2026-76260In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …6.5
• CVE-2026-76261In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …6.5
• CVE-2026-76263In Splunk Enterprise versions below 10.4.2 and 10.2.6, a use…5.4
• CVE-2026-7627A security vulnerability has been detected in 8nite metatrad…6.3
• CVE-2026-7628A vulnerability was detected in crazyrabbitLTC mcp-code-revi…6.3
• CVE-2026-7629A flaw has been found in kleneway awesome-cursor-mpc-server …6.3
• CVE-2026-7630A vulnerability has been found in innocommerce InnoShop up t…7.3
• CVE-2026-76309In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …4.3