CVE-2026-76354

creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:18+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-24 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtts42qkba2u...

CVE-2026-76354 Path Traversal through Search Head Clustering in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could affect system integrity and availability by sending a crafted Representational State Transfer REST API request that deletes or temporarily overwrites files...