CVE-2026-76269

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10 Splunk Enterprise versions prior to 9.4.15

Description An improper access control issue exists in the REST API, which is an architectural style for providing standards between computer systems on the web. A user without admin or power roles can access search job information belonging to other users by providing a user-controlled job identifier. This allows unauthorized access to search query text, job metadata, results, and preview results because the API fails to fully validate job ownership.

Recommendations Update to version 10.4.3 or later. Update to version 10.2.7 or later. Update to version 10.0.10 or later. Update to version 9.4.15 or later.