Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Enterprise Security 8.6.1 Clear all filters
TI-2026-53443 CVE-2026-76388 · GHSA-hj4g-r7xm-5vg9

Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security

Priority LOW 37

In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterprise Security role could change User and Entity Behavior Analytics (UEBA) search macros that scheduled searches run with a…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0035 Published 2026-08-19 Fixed in 8.6.1 CWE-732
TI-2026-53442 CVE-2026-76387 · GHSA-p274-gc4j-gjpj

SPL Injection through the REST API in Splunk Enterprise Security

Priority LOW 37

In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the mc_investigation_read capability could inject Search Processing Language (SPL) through Analyst Queu…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00401 Published 2026-08-19 Fixed in 8.6.1 CWE-20