Critical CVSS 9.8 flaw in Splunk Enterprise's Patroni REST API allows unauthenticated remote code execution for attackers with internal network access. No credentials https://deafnews.it/en/article/cve-2026-76268-unauthenticated-rce-in-splunk-enterprise-patroni-rest-api
DeafNewsCVE-2026-76268: Unauthenticated RCE in Splunk Enterprise Patroni REST API | DeafNewsA critical CVSS 9.8 flaw in the Patroni component of Splunk Enterprise allows attackers with internal network access to execute system commands without credentials.