CVE-2026-76323

In affected Splunk Enterprise versions (below 10.4.2, 10.2.6, 10.0.9, 9.4.14), the Job Details dashboard fails to neutralize caller-supplied search identifiers, allowing non-admin/power users to inject risky SPL that executes with another authenticated user's permissions. Exploitation requires ph...

CVE-2026-76254

Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, 9.4.14, and 9.3.14 are affected. Dataset Explorer fails to validate or escape dataset names when building SPL searches and skips SPL safeguards for risky commands, enabling a phishing attack to execute arbitrary SPL under the victim's privi...

EUVD-2024-51916

Malicious code in bioql PyPI...