CVE-2026-76333

creationtimestamp| type| source ---|---|--- 2026-08-20 04:46:30+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-20 12:07:38+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtj7iuwws22t 2026-08-20 12:07:40+00:00|...

CVE-2026-76333 Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a Dashboard Studio workflow action with a crafted Uniform Resource Locator URL. When another authenticated user selects the stored action from Event Actions and selects...