Splunk

Connect For Kafka

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.2

CVE-2026-76402

  • EPSS 0.3%
  • Veröffentlicht 19.08.2026 21:35:16
  • Zuletzt bearbeitet 24.08.2026 18:54:28

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure a non-secure Hypertext Transfer Protocol (HTTP) Event Collector endpoint in Splunk En...

7.4

CVE-2026-76403

  • EPSS 0.19%
  • Veröffentlicht 19.08.2026 21:35:16
  • Zuletzt bearbeitet 24.08.2026 18:46:57

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol (HTTP) Event ...

5.9

CVE-2026-76400

  • EPSS 0.29%
  • Veröffentlicht 19.08.2026 21:35:15
  • Zuletzt bearbeitet 24.08.2026 19:03:38

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API and influence responses from a Hypertext Transfer Protocol (HTTP) Event Collector endpoint in Splunk ...

5.9

CVE-2026-76401

  • EPSS 0.29%
  • Veröffentlicht 19.08.2026 21:35:15
  • Zuletzt bearbeitet 24.08.2026 18:58:44

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure timestamp extraction with a crafted regular expression and matching event data to blo...