EUVD-2026-63130

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could bypass Search Processing Language SPL safeguards for risky commands through the Job Details dashboard. The injected SPL could run using the permissions of an...

CVE-2026-76323

In affected Splunk Enterprise versions (below 10.4.2, 10.2.6, 10.0.9, 9.4.14), the Job Details dashboard fails to neutralize caller-supplied search identifiers, allowing non-admin/power users to inject risky SPL that executes with another authenticated user's permissions. Exploitation requires ph...