As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0457 Vulnerabilities fixed in Splunk Enterprise
Splunk has patched multiple vulnerabilities in Splunk Enterprise versions earlier than 10.4.4 and certain other releases. The flaws span insufficient access controls, denial of service risks, and unsafe command execution, affecting authentication, request parsing, application programming interface (API) permissions, and configuration management. Organizations running affected versions should prioritize updates to prevent privilege escalation, unauthorized data access, and resource exhaustion attacks.
Why it matters: Splunk Enterprise administrators and security teams need to upgrade immediately: these vulnerabilities allow low-privileged users to access restricted data, execute arbitrary commands, cause service disruptions, and escalate privileges across multiple system components.
- Source published
- First seen by Cybersecurity Tracker