Splunk Secure Gateway vulnerabilities

• splunk, splunk enterprise, secure gateway +2 more SPL Injection through the REST API in Splunk Secure Gateway CVE-2026-76295 4.3 MediumOctober 21, 2026
• splunk, splunk enterprise, secure gateway +2 more Missing Authorization through REST API Endpoints in Splunk Secure Gateway CVE-2026-76292 6.5 MediumOctober 21, 2026
• splunk, splunk enterprise, secure gateway +2 more Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway CVE-2026-76280 6.3 MediumOctober 7, 2026
• splunk, splunk enterprise, secure gateway +2 more Missing Access Control through the REST API in Splunk Secure Gateway CVE-2026-76272 4.3 MediumOctober 7, 2026
• splunk, splunk enterprise, secure gateway +2 more Improper Access Control through REST API Endpoints in Splunk Secure Gateway CVE-2026-76265 6.5 MediumOctober 7, 2026
• splunk, splunk enterprise, secure gateway +2 more Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway CVE-2026-76351 8.8 HighAugust 19, 2026
• splunk, splunk enterprise, secure gateway +2 more Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway CVE-2026-76347 5.4 MediumAugust 19, 2026
• splunk, splunk enterprise, secure gateway +2 more SPL Injection through Splunk Web in Splunk Secure Gateway CVE-2026-76327 6.4 MediumAugust 19, 2026
• splunk, splunk enterprise, secure gateway +2 more Insecure Default Access Control List through the REST API in Splunk Secure Gateway CVE-2026-76261 5.3 MediumAugust 19, 2026
• splunk, splunk enterprise, secure gateway +2 more Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway CVE-2026-76258 6.5 MediumAugust 19, 2026
• splunk, splunk enterprise, secure gateway +2 more Missing Authorization through REST API Endpoints in Splunk Secure Gateway CVE-2026-76257 6.5 MediumAugust 19, 2026
• splunk, splunk enterprise, secure gateway +2 more Information Exposure through REST API Endpoints in Splunk Secure Gateway CVE-2026-76256 4.3 MediumAugust 19, 2026
• splunk, splunk cloud platform, enterprise +1 more +3 more Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway CVE-2026-20251 Public exploit EPSS 30.6% 8.8 HighJune 10, 2026
• splunk, splunk cloud platform, enterprise +1 more +3 more Improper Input Validation in "label" column field in Splunk Secure Gateway App CVE-2025-20389 4.3 MediumDecember 3, 2025
• splunk, splunk cloud platform, enterprise +1 more +3 more Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app CVE-2025-20383 4.3 MediumDecember 3, 2025
• splunk, splunk enterprise, secure gateway +2 more Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App CVE-2025-20230 4.3 MediumMarch 26, 2025
• splunk, splunk enterprise, secure gateway +2 more Sensitive Information Disclosure in Splunk Secure Gateway App CVE-2025-20231 7.1 HighMarch 26, 2025
• splunk, splunk enterprise, secure gateway +1 more +3 more Improper Access Control for low-privileged user in Splunk Secure Gateway App CVE-2024-45735 4.3 MediumOctober 14, 2024