CVE-2026-76403
CVE-2026-76403: 1 tracked advisory record across Splunk. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Splunk
1 advisory- Advisory severityHigh7.4
High [CVE-2026-76403] Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka
CVE-2026-76403Source published Source updated
In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol (HTTP) Event Collector in Splunk Enterprise. The vulnerability is possible because the Kerberos authentication path does not apply the configured certificate validation options when it builds the HTTP client. For more information see Install Splunk Connect for Kafka ( ), Security configurations for Splunk Connect for Kafka ( ), and Set up and use HTTP Event Collector with configuration files ( ) in the Splunk documentation.
- Affected products in this advisory
- Splunk Connect for Kafka
- Source-reported affected versions
- Splunk Connect for Kafka 2.2 before 2.2.7
- Source-reported fixed versions
- 2.2.7
- Mitigation guidance
- The vulnerability is possible because the Kerberos authentication path does not apply the configured certificate validation options when it builds the HTTP client.
Android app · Google Play
Monitor future Splunk CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.