CVE-2026-76259

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:22+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-22 01:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtn57aku7l2x...

CVE-2026-76259 Improper Privilege Management on the Management Port in Splunk Enterprise for Windows

In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all...