CVE-2026-76331

creationtimestamp| type| source ---|---|--- 2026-08-20 04:46:25+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CVE-2026-76331

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, insufficient validation of caller-supplied time values in saved-search dispatch requests allows non-admin/power users to inject SPL via the REST API, enabling unauthorized data access and integrity compromise (CVSS 8.1, HIGH)...