Splunk Connect for Kafka vulnerabilities

2 known vulnerabilities in Splunk Connect for Kafka from Splunk. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Splunk Connect for Kafka: Improper Certificate Validation

  CVE-2026-76403Aug 19, 2026Splunk

  In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol (HTTP) Event Collector

• 8.2 High severity

  Splunk Connect for Kafka: Server-Side Request Forgery

  CVE-2026-76402Aug 19, 2026Splunk

  In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure a non-secure Hypertext Transfer Protocol (HTTP) Event Collector endpoint in Splunk Enterprise t