EUVD-2026-63107

In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.8, and 9.4.13, a user who does not hold the "admin" or "power" Splunk roles could trick another user into running arbitrary Search Processing Language SPL commands through the Data Model Editor using the permissions of the affected user. Th...

CVE-2026-76255

Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.8, and 9.4.13 are affected. Splunk Web fails to enforce SPL risky-command safeguards in the Data Model Editor's base search, enabling a low-privilege user to phish a victim into executing arbitrary SPL with the victim's privileges. CVSS 6.4 ME...