CVE-2026-76318

Splunk Web renders alert trigger condition threshold values into markup without escaping special characters, allowing a low-privilege user (schedule_search role) to inject persistent XSS. Exploitation requires a victim to open a crafted link, enabling script execution and full access to that user...