CVE-2026-76268

In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Programming Interface (API) on a search head cluster member could execute attacker-controlled operating-system commands. The vulnerability is possible because this interface does not require authentication for critical configuration operations. For more information see Sidecar configuration settings (https://help.splunk.com/en/data-management/splunk-enterprise-admin-manual/10.2/splunk-sidecars/sidecar-configuration-settings) in the Splunk documentation. Splunk Enterprise versions 10.0.x and 9.4.x are not affected.

• CWE-306

• https://advisory.splunk.com/advisories/SVD-2026-1001

Published

Oct 7, 2026

Last Modified

Oct 9, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76262In Splunk Enterprise 10.4 versions below 10.4.2, an unauthen…7.5
• CVE-2026-76263In Splunk Enterprise versions below 10.4.2 and 10.2.6, a use…5.4
• CVE-2026-76264In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.10,…4.3
• CVE-2026-76265In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,…6.5
• CVE-2026-76266In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,…7.7
• CVE-2026-76267In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0…4.3
• CVE-2026-76269In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,…6.5
• CVE-2026-7627A security vulnerability has been detected in 8nite metatrad…6.3
• CVE-2026-76270In Splunk Enterprise versions below 10.4.3, a user that hold…6.5
• CVE-2026-76271In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0…6.5
• CVE-2026-76272In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,…4.3
• CVE-2026-76273In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,…4.3