CVE-2026-76278

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10

Description An authorization bypass exists in the Representational State Transfer (REST) API. A user with the edit spl2 module permissions capability can access permission grants for SPL2 modules they are not authorized to view. This occurs because the system fails to verify if the user has read access to the requested app before returning the permission grants.

Recommendations Update Splunk Enterprise to version 10.4.3 or later. Update Splunk Enterprise to version 10.2.7 or later. Update Splunk Enterprise to version 10.0.10 or later.