212991 matches found
CVE-2026-76322 SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "user" Splunk role could craft a Dashboard Studio dashboard that runs attacker-controlled Search Processing Language SPL for another authenticated user. The attacker-controlled SPL could access all releva...
CVE-2026-76319 Remote Code Execution (RCE) through Federated Search in Splunk Enterprise
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that does not hold the fshmanage capability could perform Remote Code Execution through Federated Search bundle selection. This could allow for access to all relevant data and affect system integrity and...
CVE-2026-76317
Splunk Enterprise lookup configuration REST API fails to resolve source paths before boundary checks, enabling non-admin users to exfiltrate files into controlled lookups. Affected versions: 9.4.14, 10.0.9, 10.2.6, 10.4.2 and below. CVSS 8.8 HIGH. No in-the-wild exploitation reported. See https:/...
CVE-2026-76317 Path Traversal through the Lookup Configuration REST API in Splunk Enterprise
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could move files that the user account running Splunk Enterprise can read into a lookup that the user controls. The user could then access all relevant data and...
CVE-2026-76315
Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 are affected by a privilege escalation vulnerability in Splunk Web Manager Configuration . The root cause is that the REST API path for manager configuration does not enforce the permission that normally controls manager configur...
CVE-2026-76313 Remote Code Execution (RCE) through the REST API in Splunk Enterprise
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could perform Remote Code Execution RCE by uploading a malicious knowledge bundle and causing it to be used by distributed search, which can allow for access to all...
CVE-2026-76260
CVE-2026-76260 is an incorrect permission assignment vulnerability in Splunk Enterprise affecting versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 . The properties REST endpoint checks for the rest_properties_get capability instead of the more restrictive list_storage_passwords capability, allow...
CVE-2026-76258
Splunk Secure Gateway's companion app registration handler uses a hard-coded cryptographic key, allowing non-admin/power users to register arbitrary callback URLs and redirect mobile user tokens to attacker-controlled endpoints. Splunk fixed this in Secure Gateway 3.8.71, 3.9.24, and 3.10.10; Ent...
CVE-2026-76254 SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, 9.4.14, and 9.3.14, an unauthenticated user could cause another user to dispatch arbitrary Search Processing Language SPL pipelines from Dataset Explorer with the same privileges as that user, which can allow for access to all relevant...
CVE-2026-76254
Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, 9.4.14, and 9.3.14 are affected. Dataset Explorer fails to validate or escape dataset names when building SPL searches and skips SPL safeguards for risky commands, enabling a phishing attack to execute arbitrary SPL under the victim's privi...
CVE-2026-76255
Splunk Enterprise versions below 9.4.13, 10.0.8, 10.2.6, and 10.4.1 are vulnerable: Splunk Web omits SPL safeguards in the Data Model Editor's base search, allowing a low-privilege user to phish another into executing arbitrary SPL commands with the victim's privileges, compromising confidentiali...
CVE-2026-76255 Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise
In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.8, and 9.4.13, a user who does not hold the "admin" or "power" Splunk roles could trick another user into running arbitrary Search Processing Language SPL commands through the Data Model Editor using the permissions of the affected user. Th...
CVE-2026-76253 Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedulesearch capability could run arbitrary Search Processing Language SPL commands with the highest level of system privilege and read every credential stored in the credential store, whic...
CVE-2026-76253
Any user with the schedule_search capability can execute arbitrary SPL commands at system level, reading all stored credentials. Splunk advisory SVD-2026-0801 documents fixes in versions 10.4.2, 10.2.6, 10.0.9, and 9.4.14. Exploitation details are not provided in the documents.
CVE-2026-76251
Splunk Enterprise versions before 10.0.9, 10.2.6, and 10.4.2 fail to enforce the read_o11y_content capability on the Splunk App for Splunk Observability Cloud REST API endpoints, allowing low-privilege users to forward requests using the stored access token, exposing Observability Cloud data (HIG...
CVE-2025-36255 DS8900F and DS8A00 Privilege Escalation
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions...
CVE-2025-36255
CVE-2025-36255 affects IBM System Storage DS8A00 (versions 10.1.3.0 through 10.11.35.0) and IBM DS8900F (versions 89.40.83.0 through 89.44.25.0). An authenticated user with low privileges can create a new user assigned privileged roles, due to improper privileged defined with unsafe actions . Thi...
CVE-2025-36398
CVE-2025-36398 affects IBM System Storage DS8A00 (10.1.3.0–10.11.35.0) and IBM DS8900F (89.40.83.0–89.44.25.0). An authenticated user can read or modify another user's command history due to an externally controlled filename , resulting in low confidentiality and integrity impact (CVSS 3.1: 5.4 M...
CVE-2026-76827
A flaw was found in search-indexer. This vulnerability allows a registered and authenticated managed cluster to tamper with or delete another cluster's indexed search data. This is possible because the delta-sync write paths in search-indexer do not properly restrict UPDATE/DELETE operations to...