UpHeron
All vulnerabilities

Servers and applications

CVE-2026-76275

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could access search query text and job metadata for jobs that belong to other users, including job identifiers, dispatch parameters, result counts, and execution metadata, through an Application Programming Interface (API) implemented as a Representational State…

Severity
Medium 4.3
Published
7 Oct 2026
Last changed
14 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.4.15, 10.0.10, 10.2.7, 10.4.3
Sources
NVD

Affected software

SoftwareAffected versions
Splunk EnterpriseServers and applications · cpe:a:splunk:splunk
  • From 9.4.0 before 9.4.15
  • From 10.0.0 before 10.0.10
  • From 10.2.0 before 10.2.7
  • From 10.4.0 before 10.4.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-76275
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-76275