CVE-2026-76401: falha de média gravidade em Splunk Connect for Kafka
Regular Expression Denial of Service (DoS) through the REST API in Splunk Connect for Kafka
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.4%
In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure timestamp extraction with a crafted regular expression and matching event data to block a Kafka Connect worker thread, stopping event delivery for the affected connector. The vulnerability is possible because timestamp extraction evaluates customer-supplied regular expressions without a time limit. For more information see Install Splunk Connect for Kafka (https://help.splunk.com/en/data-management/integrate-data-with-add-ons/splunk-connect-for-kafka/2.2/install/install-splunk-connect-for-kafka) and Data ingestion parameters for Splunk Connect for Kafka (https://help.splunk.com/en/data-management/integrate-data-with-add-ons/splunk-connect-for-kafka/2.2/overview/data-ingestion-parameters-for-splunk-connect-for-kafka) in the Splunk documentation.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Splunk · Splunk Connect for KafkaCVEs relacionadas — Splunk Connect for Kafka
No mesmo produto, das mais perigosas para as menos.
CVE-2026-76402HIGHServer-Side Request Forgery (SSRF) through the REST API in Splunk Connect for KafkaEPSS 0.4%CVE-2026-76400MEDIUMDenial of Service (DoS) through the REST API in Splunk Connect for KafkaEPSS 0.4%CVE-2026-76403HIGHImproper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for KafkaEPSS 0.2%