CVE-2021-26253

8.1 highEPSS 0.8%

High (8.1) in splunk splunk. EPSS 0.8% chance of exploitation in the next 30 days.

A potential vulnerability in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions before 8.1.6. The potential vulnerability impacts Splunk Enterprise instances configured to use DUO MFA and does not impact or affect a DUO product or service.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2022-05-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

splunk:splunk

References

https://www.splunk.com/en_us/product-security/announcements/svd-2022-0504.html
https://www.splunk.com/en_us/product-security/announcements/svd-2022-0504.html

Check your stack JSON