What’s Vulnerable › Products
Splunk Secure Gateway vulnerabilities
19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 19 published in the last 12 months.
Check whether your Splunk Secure Gateway version is affected
Latest Splunk Secure Gateway vulnerabilities
- CVE-2026-76295 — SPL Injection through the REST API in Splunk Secure Gateway (CVSS 4.3)
- CVE-2026-76292 — Missing Authorization through REST API Endpoints in Splunk Secure Gateway (CVSS 6.5)
- CVE-2026-76280 — Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway (CVSS 6.3)
- CVE-2026-76272 — Missing Access Control through the REST API in Splunk Secure Gateway (CVSS 4.3)
- CVE-2026-76265 — Improper Access Control through REST API Endpoints in Splunk Secure Gateway (CVSS 6.5)
- CVE-2026-76351 — Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway (CVSS 8.8)
- CVE-2026-76347 — Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway (CVSS 5.4)
- CVE-2026-76327 — SPL Injection through Splunk Web in Splunk Secure Gateway (CVSS 6.4)
- CVE-2026-76261 — Insecure Default Access Control List through the REST API in Splunk Secure Gateway (CVSS 6.5)
- CVE-2026-76258 — Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway (CVSS 6.5)
- CVE-2026-76257 — Missing Authorization through REST API Endpoints in Splunk Secure Gateway (CVSS 6.5)
- CVE-2026-76256 — Information Exposure through REST API Endpoints in Splunk Secure Gateway (CVSS 4.3)
- CVE-2026-20251 — Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway (CVSS 8.8)
- CVE-2025-20389 — Improper Input Validation in "label" column field in Splunk Secure Gateway App (CVSS 6.5)
- CVE-2025-20383 — Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app (CVSS 4.3)
- CVE-2025-20230 — Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App (CVSS 6.5)
- CVE-2025-20231 — Sensitive Information Disclosure in Splunk Secure Gateway App (CVSS 5.7)
- CVE-2024-53247 — Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app (CVSS 8.8)
- CVE-2024-53243 — Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway (CVSS 4.3)