Servers and applications
CVE-2026-76280
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, an authenticated user who does not hold the "admin" or "sc_admin" Splunk roles could modify Splunk Secure Gateway alert and mobile-device recipient data in App Key Value Store (KV Store) collections that later alert and subscription workflows use. The…
- Severity
- Medium 6.3
- Published
- 7 Oct 2026
- Last changed
- 14 Oct 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 9.4.15, 10.0.10, 10.2.7, 10.4.3
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Splunk EnterpriseServers and applications · cpe:a:splunk:splunk |
|