CVE-2026-76268 | Splunk Enterprise Patroni REST API Missing Authentication Vulnerability
Splunk Enterprise Patroni REST API has critical unauthenticated command execution vulnerability.
A critical vulnerability, CVE-2026-76268, has been discovered in Splunk Enterprise's Patroni REST API, allowing unauthenticated attackers with network access to execute operating-system commands. Splunk has rated this vulnerability a 9.8 (Critical) and provided patches for affected versions, with a mitigation available for those unable to upgrade immediately.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Splunk?
Get an email when a new story names Splunk, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-76268