1 matches found
CVE-2026-76254: Improper Neutralization of Special Elements in Data Query Logic
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, 9.4.14, and 9.3.14, an unauthenticated user could cause another user to dispatch arbitrary Search Processing Language SPL pipelines from Dataset Explorer with the same privileges as that user, which can allow for access to all relevant...
8.8CVSS6AI score0.00419EPSS
SaveExploits0References3
20