CVE-2026-76272

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10 Splunk Enterprise versions prior to 9.4.15 Splunk Secure Gateway versions prior to 3.10.11 Splunk Secure Gateway versions prior to 3.9.25 Splunk Secure Gateway versions prior to 3.8.72

Description Splunk Secure Gateway fails to verify if a user is authorized to request a signature, allowing users without "admin" or "power" roles to cause the system to sign attacker-controlled payloads via the REST API.

Recommendations Update Splunk Enterprise to version 10.4.3 or later. Update Splunk Enterprise to version 10.2.7 or later. Update Splunk Enterprise to version 10.0.10 or later. Update Splunk Enterprise to version 9.4.15 or later. Update Splunk Secure Gateway to version 3.10.11 or later. Update Splunk Secure Gateway to version 3.9.25 or later. Update Splunk Secure Gateway to version 3.8.72 or later.