CVE-2026-76292

🗓️ 21 Oct 2026 22:51:54Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 30 Views🌐 WEB

Low-privileged users can read other users' mobile alert data via Splunk Secure Gateway REST APIs.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2026-76292	21 Oct 202618:00	–	circl
CNNVD	Splunk Enterprise authorization issue vulnerability	21 Oct 202600:00	–	cnnvd
Cvelist	CVE-2026-76292 Missing Authorization through REST API Endpoints in Splunk Secure Gateway	21 Oct 202622:51	–	cvelist
EUVD	EUVD-2026-107659	22 Oct 202600:31	–	euvd
NCSC	Vulnerabilities fixed in Splunk Enterprise	28 Oct 202609:12	–	ncsc
NVD	CVE-2026-76292	21 Oct 202623:17	–	nvd
Positive Technologies	PT-2026-120850	21 Oct 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-76292 Missing Authorization through REST API Endpoints in Splunk Secure Gateway	21 Oct 202622:51	–	vulnrichment

NVD

Vulners

Node

splunk splunkRange9.4.0–9.4.16enterprise

splunk splunkRange10.0.0–10.0.11enterprise

splunk splunkRange10.2.0–10.2.8enterprise

splunk splunkRange10.4.0–10.4.4enterprise

Node

splunk splunk_secure_gatewayRange3.8.0–3.8.73

splunk splunk_secure_gatewayRange3.9.0–3.9.26

splunk splunk_secure_gatewayRange3.10.0–3.10.12

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "10.4",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "10.4.4"
      },
      {
        "version": "10.2",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "10.2.8"
      },
      {
        "version": "10.0",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "10.0.11"
      },
      {
        "version": "9.4",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.4.16"
      }
    ],
    "modules": [
      "REST API"
    ]
  },
  {
    "product": "Splunk Secure Gateway",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "3.10",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "3.10.12"
      },
      {
        "version": "3.9",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "3.9.26"
      },
      {
        "version": "3.8",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "3.8.73"
      }
    ],
    "modules": [
      "REST API"
    ]
  }
]

Source	Link
advisory	www.advisory.splunk.com/advisories/SVD-2026-1007

Parameter	Position	Path	Description	CWE
collections	path	/services/kvstore/collections	Insecure direct object reference in the Splunk Secure Gateway App Key Value Store REST API, allowing low-privileged users to read mobile alert notification data for other users due to lack of authorization.	CWE-862

30 Oct 2026 16:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.16.5

EPSS0.00336

SSVC

CWE-862