CVE-2026-76399

In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Processing Language SPL using the permissions of the search owner, which could allow access to all relevant data and affect system integrity. Th...

CVE-2026-76399

In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Processing Language SPL using the permissions of the search owner, which could allow access to all relevant data and affect system integrity. Th...

CVE-2026-76387

In Splunk Enterprise Security versions below 8.6.1, the Analyst Queue search filter handling does not validate filter field names before inclusion in SPL searches. A user with the mc_investigation_read capability can inject SPL, gaining access to all data and system integrity available to their s...

CVE-2026-76388

A low-privilege user with the ess_analyst role can modify UEBA search macros that run with admin privileges. Root cause: UEBA app metadata grants analyst roles write access to macros that should be admin-only. Impact: HIGH confidentiality and integrity exposure (CVSS 8.1). Affected: Splunk Enterp...

Splunk Enterprise 访问控制错误漏洞

Splunk Enterprise is a suite of data collection and analytics software from Splunk Corporation in the United States. An access control error vulnerability exists in Splunk Enterprise, which stems from a missing access control and could result in shutting down scheduled searches. The following...