CVE-2026-76388

creationtimestamp| type| source ---|---|--- 2026-08-29 07:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu7elfmq4v2m...

CVE-2026-76388 Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security

In Splunk Enterprise Security versions below 8.6.1, a user who holds the essanalyst Splunk Enterprise Security role could change User and Entity Behavior Analytics UEBA search macros that scheduled searches run with administrator permissions, allowing for access to all relevant data and system...