SS
Product
Splunk Secure Gateway
17
CVEs
0
On KEV
8.8
Max CVSS
5
New 30D
Severity mix
Critical 0High 2Medium 15Low 0
Watch
Add Splunk Secure Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-76351 | 8.8 | Aug 19 | Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway Affected: 3.10 before 3.10.9; 3.9 before 3.9.23; 3.8 before 3.8.70 |
| CVE-2026-20251 | 8.8 | Jun 10 | Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway Affected: 3.10 before 3.10.6; 3.9 before 3.9.20; 3.8 before 3.8.67 |
| CVE-2026-76292 New | 6.5 | Oct 21 | Missing Authorization through REST API Endpoints in Splunk Secure Gateway Affected: 3.10 before 3.10.12; 3.9 before 3.9.26; 3.8 before 3.8.73 |
| CVE-2026-76265 | 6.5 | Oct 7 | Improper Access Control through REST API Endpoints in Splunk Secure Gateway Affected: 3.10 before 3.10.11; 3.9 before 3.9.25; 3.8 before 3.8.72 |
| CVE-2026-76261 | 6.5 | Aug 19 | Insecure Default Access Control List through the REST API in Splunk Secure Gateway Affected: 3.10 before 3.10.9; 3.9 before 3.9.23; 3.8 before 3.8.70 |
| CVE-2026-76258 | 6.5 | Aug 19 | Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway Affected: 3.10 before 3.10.10; 3.9 before 3.9.24; 3.8 before 3.8.71 |
| CVE-2026-76257 | 6.5 | Aug 19 | Missing Authorization through REST API Endpoints in Splunk Secure Gateway Affected: 3.10 before 3.10.10; 3.9 before 3.9.24; 3.8 before 3.8.71 |
| CVE-2025-20389 | 6.5 | Dec 3 | In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and versions below 3.9.10, 3.8.58 and 3.7.28 of the Splunk Secure Gateway app on Splunk Cloud Platform, a… Affected: 3.7.0 before 3.7.28; 3.8.0 before 3.8.58; 3.9.0 before 3.9.10 |
| CVE-2025-20230 | 6.5 | Mar 26 | In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk Secure Gateway app on Splunk Cloud Platform, a… Affected: 3.7.0 before 3.7.23; 3.8.0 before 3.8.38 |
| CVE-2026-76327 | 6.4 | Aug 19 | SPL Injection through Splunk Web in Splunk Secure Gateway Affected: 3.10 before 3.10.9; 3.9 before 3.9.23; 3.8 before 3.8.70 |
| CVE-2026-76280 | 6.3 | Oct 7 | Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway Affected: 3.10 before 3.10.11; 3.9 before 3.9.25; 3.8 before 3.8.72 |
| CVE-2025-20231 | 5.7 | Mar 26 | In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk Secure Gateway app on Splunk Cloud Platform, a… Affected: 3.7.0 before 3.7.23; 3.8.0 before 3.8.38 |
| CVE-2026-76347 | 5.4 | Aug 19 | Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway Affected: 3.10 before 3.10.9; 3.9 before 3.9.23; 3.8 before 3.8.70 |
| CVE-2026-76295 New | 4.3 | Oct 21 | SPL Injection through the REST API in Splunk Secure Gateway Affected: 3.10 before 3.10.12; 3.9 before 3.9.26; 3.8 before 3.8.73 |
| CVE-2026-76272 | 4.3 | Oct 7 | Missing Access Control through the REST API in Splunk Secure Gateway Affected: 3.10 before 3.10.11; 3.9 before 3.9.25; 3.8 before 3.8.72 |
| CVE-2026-76256 | 4.3 | Aug 19 | Information Exposure through REST API Endpoints in Splunk Secure Gateway Affected: 3.10 before 3.10.9; 3.9 before 3.9.23; 3.8 before 3.8.70 |
| CVE-2025-20383 | 4.3 | Dec 3 | In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and below 3.9.10, 3.8.58, and 3.7.28 of Splunk Secure Gateway app in Splunk Cloud Platform, a low-privileged… Affected: 3.7.0 before 3.7.28; 3.8.0 before 3.8.58; 3.9.0 before 3.9.10 |
Showing 17