CVE-2026-76295Medium 4.3SPL Injection through the REST API in Splunk Secure Gateway0.3%
CVE-2026-76292Medium 6.5Missing Authorization through REST API Endpoints in Splunk Secure Gateway0.3%
CVE-2026-76280Medium 6.3Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway0.2%
CVE-2026-76272Medium 4.3Missing Access Control through the REST API in Splunk Secure Gateway0.2%
CVE-2026-76265Medium 6.5Improper Access Control through REST API Endpoints in Splunk Secure Gateway0.3%
CVE-2026-76351High 8.8Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway0.4%
CVE-2026-76347Medium 5.4Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway0.3%
CVE-2026-76327Medium 6.4SPL Injection through Splunk Web in Splunk Secure Gateway0.3%
CVE-2026-76261Medium 5.3Insecure Default Access Control List through the REST API in Splunk Secure Gateway0.3%
CVE-2026-76258Medium 6.5Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway0.3%
CVE-2026-76257Medium 6.5Missing Authorization through REST API Endpoints in Splunk Secure Gateway0.3%
CVE-2026-76256Medium 4.3Information Exposure through REST API Endpoints in Splunk Secure Gateway0.3%
CVE-2026-20251High 8.8Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway30.6%
CVE-2025-20389Medium 4.3Improper Input Validation in "label" column field in Splunk Secure Gateway App0.4%
CVE-2025-20383Medium 4.3Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app0.3%
CVE-2025-20230Medium 4.3Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App0.3%
CVE-2025-20231High 7.1Sensitive Information Disclosure in Splunk Secure Gateway App0.5%
CVE-2024-53243Medium 4.3Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway0.3%
CVE-2024-53247High 8.8Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app1.1%
CVE-2024-45735Medium 4.3Improper Access Control for low-privileged user in Splunk Secure Gateway App0.3%