CVE-2026-76347
Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could use Server-Side Request Forgery (SSRF) in report notifications to send system-authenticated requests to internal Splunk services, which could allow for changes to Search Head Cluster state and a denial of service. The vulnerability is possible because Splunk Secure Gateway does not validate report notification path values before it sends internal requests.
| CWE | CWE-918 |
| Vendor | splunk |
| Product | splunk enterprise |
| Published | Aug 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for splunk splunk enterprise
Be the first to know when new medium vulnerabilities affecting splunk splunk enterprise are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Splunk / Splunk Enterprise
10.4 < 10.4.2 10.2 < 10.2.6 10.0 < 10.0.9 9.4 < 9.4.14
Splunk / Splunk Secure Gateway
3.10 < 3.10.9 3.9 < 3.9.23 3.8 < 3.8.70