Splunk's Oct 7 advisory fixes 17 Splunk Enterprise bugs. The critical one, CVE-2026-76268 (CVSS 9.8), lets an unauthenticated attacker with network access to the Patroni REST API on a search head cluster member run OS commands; it affects 10.4 before 10.4.3 and 10.2 before 10.2.7 (10.0.x and 9.4.x are not affected). Upgrade to 10.4.3 / 10.2.7 / 10.0.10 / 9.4.15. Workaround if you don't use Edge Processor, OpAmp or SPL2 pipelines: set disabled = true in the [postgres] stanza of server.conf and restart. Also fixed: a Linux package-upgrade local privesc (CVE-2026-76266, 7.7). Some extra CVEs (76264/65/72/80) need post-upgrade config or Secure Gateway upgrades. Public PoC claims are not verified here.