Skip to main content
Threat Radar animated logo

Threats Tagged 'cve-2026-76257'

View all threats tagged with 'cve-2026-76257'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Tag: cve-2026-76257

Threats Tagged 'cve-2026-76257'

Click on any threat for detailed analysis and mitigation recommendations

Kwetsbaarheden verholpen in Splunk Enterprise door SplunkCVE-2026-76251
0

Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise, specifiek in versies vóór 10.4.2, 10.2.6, 10.0.9 en 9.4.14.

HighVulnerability#gcve#osv#ghsa-3pfp-cpmw-f74j
Join the discussion
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.10, 3.9.24, and 3.8.71, a user… (CVE-2026-76257)CVE-2026-76257
0

CVE-2026-76257 is a vulnerability in Splunk Enterprise and Splunk Secure Gateway where users with permissions to list storage passwords but without Secure Gateway admin privileges can access Mobile Device Management signing secrets. This occurs because certain Splunk Secure Gateway REST API endpoints do not enforce admin privilege checks before processing requests, potentially compromising mobile-device enrollment trust.

MediumVulnerability#gcve#osv#ghsa-pxp8-rwm8-6fq3
Join the discussion
CVE-2026-76257: The software does not perform an authorization check when an actor attempts to access a resource or perform an action. in Splunk Splunk EnterpriseCVE-2026-76257
0

CVE-2026-76257 is a vulnerability in Splunk Enterprise and Splunk Secure Gateway where certain REST API endpoints do not enforce proper authorization checks. This allows users with roles that can list storage passwords, but without Secure Gateway admin privileges, to access Mobile Device Management signing secrets. The flaw affects multiple versions of Splunk Enterprise below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, as well as Splunk Secure Gateway versions below 3.10.10, 3.9.24, and 3.8.71. The vulnerability could compromise mobile-device enrollment trust. The CVSS score is 6.5 (medium severity).

MediumVulnerability#cve#cve-2026-76257
Join the discussion

Showing 1 to 3 of 3 results

Filters:Tag: cve-2026-76257
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses