CVE-2026-76402

Name of the Vulnerable Software and Affected Versions Splunk Connect for Kafka versions prior to 2.2.7

Description An unauthenticated user with access to the Kafka Connect Representational State Transfer (REST) API can configure a non-secure Hypertext Transfer Protocol (HTTP) Event Collector endpoint in Splunk Enterprise. This occurs because the HTTP Event Collector endpoint validation does not require secure transport by default. This flaw allows the connector to send authentication credentials to a server controlled by an attacker, leading to the exposure of credentials, compromise of data sent through the connector, and limited alteration of event delivery.

Recommendations Update Splunk Connect for Kafka to version 2.2.7 or later.