Server-Side Request Forgery

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk EnterpriseCVE-2025-20371Splunk · CVSS 7.5 · 0.5% likely

   CWE-918

2. Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security CloudCVE-2026-76389Splunk · CVSS 8.8 · 0.4% likely

   CWE-918

3. Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure GatewayCVE-2026-76351Splunk · CVSS 8.8 · 0.4% likely

   CWE-918

4. Server-Side Request Forgery (SSRF) through the REST API in Splunk Connect for KafkaCVE-2026-76402Splunk · CVSS 8.2 · 0.4% likely

   CWE-918

5. Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk EnterpriseCVE-2025-20388Splunk · CVSS 2.7 · 0.4% likely

   CWE-918

6. Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk EnterpriseCVE-2023-22936Splunk · CVSS 6.3 · 0.4% likely

   CWE-918

7. Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk EnterpriseCVE-2026-20252Splunk · CVSS 7.6 · 0.3% likelycovered by CyberSIXT

   CWE-918

8. Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability CloudCVE-2026-76274Splunk · CVSS 6.5 · 0.3% likely

   CWE-918

9. Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOARCVE-2026-76361Splunk · CVSS 2.7 · 0.3% likely

   CWE-918

10. Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure GatewayCVE-2026-76347Splunk · CVSS 5.4 · 0.3% likely

    CWE-918

11. Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP ServerCVE-2026-76286Splunk · CVSS 5.3 · 0.2% likely

    CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.