Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/19 12:00 a.m.•2 views

CVE-2026-76254: Improper Neutralization of Special Elements in Data Query Logic

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, 9.4.14, and 9.3.14, an unauthenticated user could cause another user to dispatch arbitrary Search Processing Language SPL pipelines from Dataset Explorer with the same privileges as that user, which can allow for access to all relevant...

8.8CVSS6AI score0.00419EPSS
SaveExploits0References3
Rows per page
Query Builder