UpHeron
All vulnerabilities

Servers and applications

CVE-2026-76291

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedule_search capability could bypass the expected safeguards in the scheduled search workflow. The user could then run risky Search Processing Language (SPL) commands that disclose or alter Splunk Enterprise data or disrupt Splunk Enterprise availability. The vulnerability is possible…

Severity
High 8.8
Published
21 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.4.16, 10.0.11, 10.2.8, 10.4.4
Sources
NVD

Affected software

SoftwareAffected versions
Splunk EnterpriseServers and applications · cpe:a:splunk:splunk
  • From 9.4.0 before 9.4.16
  • From 10.0.0 before 10.0.11
  • From 10.2.0 before 10.2.8
  • From 10.4.0 before 10.4.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-76291
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-76291