Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Enterprise 10.2.6, 10.4.2 Clear all filters
TI-2026-53391 CVE-2026-76336 · GHSA-cg88-8x7g-8rf5

Improper Access Control through the REST API in Splunk Enterprise

Priority LOW 31

In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "power" Splunk roles could delete all Search Processing Language 2 (SPL2) modules across all apps and users on the instance t…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00338 Published 2026-08-19 Fixed in 10.4.2, 10.2.6 CWE-862
TI-2026-53363 CVE-2026-76263 · GHSA-826f-fgv2-26mm

Improper Access Control through the REST API in Splunk Enterprise

Priority LOW 24

In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "power" Splunk roles could delete Splunk Processing Language version 2 (SPL2) modules belonging to other users through the da…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00287 Published 2026-08-19 Fixed in 10.4.2, 10.2.6 CWE-639