CVE-2026-76275

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10 Splunk Enterprise versions prior to 9.4.15

Description An improper authorization issue exists in the REST API, which is an architectural style for providing standards between computer systems on the web. Users without admin or power roles can access search query text and job metadata belonging to other users. This includes job identifiers, dispatch parameters, result counts, and execution metadata, because the API does not fully enforce per-user authorization before listing search job information.

Recommendations Update to version 10.4.3 or later. Update to version 10.2.7 or later. Update to version 10.0.10 or later. Update to version 9.4.15 or later.