CVE-2016-10126

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-01-10 · updated 2026-06-17
Weakness: CWE-264

Description

Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.x before 6.3.8, and 6.4.x before 6.4.4 allows remote attackers to conduct HTTP request injection attacks and obtain sensitive REST API authentication-token information via unspecified vectors, aka SPL-128840.

Affected products

Splunk Enterprise: 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5 (+60)

References

http://www.securityfocus.com/bid/95412
https://www.splunk.com/view/SP-CAAAPSR
http://www.securityfocus.com/bid/95412
https://www.splunk.com/view/SP-CAAAPSR

Get alerted when CVE-2016-10126 or the next vulnerability affects your stack