UpHeron
All vulnerabilities

Servers and applications

CVE-2026-76287

In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capability or edit_data_management_pipeline_job capability could read or delete Data Management SPL2 preview jobs and results outside their ownership scope. The vulnerability is possible because the Data Management Representational State Transfer (REST) API verifies the required…

Severity
Medium 5.4
Published
21 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
10.4.4
Sources
NVD

Affected software

SoftwareAffected versions
Splunk EnterpriseServers and applications · cpe:a:splunk:splunk
  • From 10.4.0 before 10.4.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-76287
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-76287