CVE-2026-76252

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.13

Description An unauthenticated user can execute unauthorized JavaScript in a victim's browser by tricking them into visiting a malicious web page. This Cross-Site Scripting (XSS) occurs because Splunk Web fails to validate the origin and source of messages received by a page message handler. Successful exploitation allows unauthorized access to data available to the user and may compromise system integrity. The attack requires phishing the affected user to initiate a request within their browser.

Recommendations Update to version 10.4.2 or later. Update to version 10.2.6 or later. Update to version 10.0.9 or later. Update to version 9.4.13 or later.