UpHeron
All vulnerabilities

Servers and applications

CVE-2026-76293

In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_xml capability could execute arbitrary operating-system commands using the permissions of the user account running Splunk Enterprise by opening the affected configuration in the Splunk Web Manager page. The vulnerability is possible because Splunk Web evaluates user-controlled…

Severity
High 7.2
Published
21 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.4.16, 10.0.11, 10.2.8, 10.4.3
Sources
NVD

Affected software

SoftwareAffected versions
Splunk EnterpriseServers and applications · cpe:a:splunk:splunk
  • From 9.4.0 before 9.4.16
  • From 10.0.0 before 10.0.11
  • From 10.2.0 before 10.2.8
  • From 10.4.0 before 10.4.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-76293
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-76293