SS
Product
Splunk Secure Gateway
20
CVEs
0
On KEV
8.8
Max CVSS
5
New 30D
Severity mix
Critical 0High 3Medium 17Low 0
Watch
Add Splunk Secure Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-76351 | 8.8 | Aug 19 | Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway Affected: 3.10 before 3.10.9; 3.9 before 3.9.23; 3.8 before 3.8.70 |
| CVE-2026-20251 | 8.8 | Jun 10 | Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway Affected: 3.10 before 3.10.6; 3.9 before 3.9.20; 3.8 before 3.8.67 |
| CVE-2024-53247 | 8.8 | Dec 10 | Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app Affected: 3.7 before 3.7.13; 3.4 before 3.4.261 |
| CVE-2026-76292 | 6.5 | Oct 21 | Missing Authorization through REST API Endpoints in Splunk Secure Gateway Affected: 3.10 before 3.10.12; 3.9 before 3.9.26; 3.8 before 3.8.73 |
| CVE-2026-76265 | 6.5 | Oct 7 | Improper Access Control through REST API Endpoints in Splunk Secure Gateway Affected: 3.10 before 3.10.11; 3.9 before 3.9.25; 3.8 before 3.8.72 |
| CVE-2026-76261 | 6.5 | Aug 19 | Insecure Default Access Control List through the REST API in Splunk Secure Gateway Affected: 3.10 before 3.10.9; 3.9 before 3.9.23; 3.8 before 3.8.70 |
| CVE-2026-76258 | 6.5 | Aug 19 | Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway Affected: 3.10 before 3.10.10; 3.9 before 3.9.24; 3.8 before 3.8.71 |
| CVE-2026-76257 | 6.5 | Aug 19 | Missing Authorization through REST API Endpoints in Splunk Secure Gateway Affected: 3.10 before 3.10.10; 3.9 before 3.9.24; 3.8 before 3.8.71 |
| CVE-2025-20389 | 6.5 | Dec 3 | Improper Input Validation in "label" column field in Splunk Secure Gateway App Affected: 3.9 before 3.9.10; 3.8 before 3.8.58; 3.7 before 3.7.28 |
| CVE-2025-20230 | 6.5 | Mar 26 | Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App Affected: 3.8 before 3.8.38; 3.7 before 3.7.23 |
| CVE-2026-76327 | 6.4 | Aug 19 | SPL Injection through Splunk Web in Splunk Secure Gateway Affected: 3.10 before 3.10.9; 3.9 before 3.9.23; 3.8 before 3.8.70 |
| CVE-2026-76280 | 6.3 | Oct 7 | Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway Affected: 3.10 before 3.10.11; 3.9 before 3.9.25; 3.8 before 3.8.72 |
| CVE-2025-20231 | 5.7 | Mar 26 | Sensitive Information Disclosure in Splunk Secure Gateway App Affected: 3.8 before 3.8.38; 3.7 before 3.7.23 |
| CVE-2026-76347 | 5.4 | Aug 19 | Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway Affected: 3.10 before 3.10.9; 3.9 before 3.9.23; 3.8 before 3.8.70 |
| CVE-2026-76295 | 4.3 | Oct 21 | SPL Injection through the REST API in Splunk Secure Gateway Affected: 3.10 before 3.10.12; 3.9 before 3.9.26; 3.8 before 3.8.73 |
| CVE-2026-76272 | 4.3 | Oct 7 | Missing Access Control through the REST API in Splunk Secure Gateway Affected: 3.10 before 3.10.11; 3.9 before 3.9.25; 3.8 before 3.8.72 |
| CVE-2026-76256 | 4.3 | Aug 19 | Information Exposure through REST API Endpoints in Splunk Secure Gateway Affected: 3.10 before 3.10.9; 3.9 before 3.9.23; 3.8 before 3.8.70 |
| CVE-2025-20383 | 4.3 | Dec 3 | Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app Affected: 3.9 before 3.9.10; 3.8 before 3.8.58; 3.7 before 3.7.28 |
| CVE-2024-53243 | 4.3 | Dec 10 | Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway Affected: 3.8 before 3.8.5; 3.7 before 3.7.18; 3.4 before 3.4.262 |
| CVE-2024-45735 | 4.3 | Oct 14 | Improper Access Control for low-privileged user in Splunk Secure Gateway App Affected: 3.6 before 3.6.17; 3.4 before 3.4.259 |
Showing 20