CVE-2026-76268

Summary

This vulnerability allows unauthenticated users to execute arbitrary commands on the affected Splunk Enterprise server via the Patroni REST API, posing a significant risk to system security.

Exploitability

Exploitation is relatively straightforward for an attacker with network access to the REST API, as no authentication is required for critical configuration operations.

Blast radius

If exploited, this vulnerability could lead to complete compromise of the affected Splunk Enterprise server, potentially allowing attackers to control the system and access sensitive data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Splunk Enterprise version 10.4.3 or later, or apply the relevant patch for versions 10.2.7 and earlier.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.