CVE-2026-76268 and others: Multiple vulnerabilities in Splunk Enterprise, up to 9.8 rating ‍🔥

Splunk has disclosed multiple vulnerabilities in Splunk Enterprise. The most serious is CVE-2026-76268, which allows an unauthenticated attacker to execute operating system commands through the Patroni REST API.

Search at Netlas.io:
👉 Link: https://nt.ls/GWmyZ
👉 Dork: http.title:"login - splunk" OR http.headers.server:"splunkd" OR http.unknown_headers.key:"x_splunk_version"

Vendor's advisory:
https://advisory.splunk.com/advisories/SVD-2026-1001