CVE-2026-76268Suited to automated attack · CISA
Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise
CVSS score
9.8
EPSS probability
%0.4
Risk score
0.0
Published
8 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
CVE-2026-76268 PoC: Splunk Enterprise SHC Patroni REST unauth RCE — PATCH /config archive_command + POST /restart. Check + mass exploit, OOB POCBIT-76268-OK, CVSS 9.8. https://pocbit.org/pocs/cve-2026-76268
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2026-20253 Actively exploited
Missing authentication in Splunk
S
Patch status unknown Public Exploits:9EPSS %97
8.1
CVE-2021-22901
Use after free in N/a Https://github.com/curl/curl
N
Patch verifiedEPSS %64
6.5
CVE-2022-32206
Resource allocation without limits in N/a Https://github.com/curl/curl
N
Patch verifiedEPSS %36
7.5
CVE-2022-35737
Vulnerability in N/a
N
Patch status unknownEPSS %23
4.3
CVE-2022-32205
Resource allocation without limits in N/a Https://github.com/curl/curl
N
Patch verifiedEPSS %31
7.5
CVE-2022-43551
Vulnerability in N/a Https://github.com/curl/curl
N
Patch status unknownEPSS %17
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-76268"