CVE-2026-76276

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10

Description A low-privileged user without admin or power roles can retrieve the original source code for the Discover Splunk Observability Cloud app via Splunk Web. This occurs because production JavaScript bundles for the app contain embedded source maps, which are files that map transformed code back to its original source for debugging purposes.

Recommendations Update to version 10.4.3 or later. Update to version 10.2.7 or later. Update to version 10.0.10 or later.