CVE-2026-76268 | Splunk Enterprise Patroni REST API Missing Authentication Vulnerability

Horizon3.aiOctober 22, 2026AppSec Vulnerabilities Identity

Horizon3.ai's NodeZero Rapid Response test helps security teams validate exposure to CVE-2026-76268, a critical Splunk Enterprise vulnerability that could allow unauthenticated attackers with network access to execute operating-system commands.

Summary from Horizon3.ai.

Read the full article at Horizon3.ai

Explained

The technology and terms in this story. Learn more

ConceptCVE · Common Vulnerabilities and ExposuresThe public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.

Vulnerabilities in this story

Severity and exploitation facts from NVD, FIRST, and CISA.

CVE-2026-76268CVSS unavailable

More in AppSec

SANS Stormcast Monday, October 26th, 2026: PHP2Shell Exploit Reliability; Node.js Brotli Decoder RCE (CVE-2026-111497); Tailscale "Tailworm" Vulnerabilities; HPE ArubaOS 8/10 Patches 72 Flaws

Podcast8 minSANS Internet Storm Center StormCast3h agoAppSecVulnerabilitiesCVE-2026-111497

Risky Bulletin: Brotli RCE is wrecking what's left of the internet

Podcast8 minRisky Business News5h agoAppSec

OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken

Help Net Security7h agoAppSecNetwork

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

The Hacker NewsyesterdayAppSecVulnerabilitiesCVE-2026-111497

New Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain Attack

Socket Blog2d agoAppSec