UpHeron
All vulnerabilities

Servers and applications

CVE-2026-76292

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a low-privileged user that does not hold the "admin" Splunk role or the "sc_admin" Splunk Secure Gateway role could read mobile alert notification data for other users through Splunk Secure Gateway App Key Value Store (KV Store) Representational State…

Severity
Medium 6.5
Published
21 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.4.16, 10.0.11, 10.2.8, 10.4.4
Sources
NVD

Affected software

SoftwareAffected versions
Splunk EnterpriseServers and applications · cpe:a:splunk:splunk
  • From 9.4.0 before 9.4.16
  • From 10.0.0 before 10.0.11
  • From 10.2.0 before 10.2.8
  • From 10.4.0 before 10.4.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-76292
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-76292