CVE-2026-76295

In Splunk Enterprise (versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16) and Splunk Secure Gateway (versions below 3.10.12, 3.9.26, and 3.8.73), an SPL Injection vulnerability exists via the REST API. The root cause is that Splunk Secure Gateway fails to neutralize special characters in values b...

CVE-2026-76295 SPL Injection through the REST API in Splunk Secure Gateway

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a user who does not hold the "admin" or "power" Splunk roles could view dashboard and report listings beyond the requested filter scope while remaining...