Servers and applications
CVE-2026-76279
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processing Language (SPL) command to write events to internal indexes outside the index access configured for the role. The vulnerability is possible because Splunk Enterprise does not normalize whitespace in an index name before applying…
- Severity
- Medium 4.3
- Published
- 7 Oct 2026
- Last changed
- 14 Oct 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 9.4.15, 10.0.10, 10.2.7, 10.4.3
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Splunk EnterpriseServers and applications · cpe:a:splunk:splunk |
|