CVE-2026-76310

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14

Description An unauthenticated user possessing an embedded report token can download the search job dispatch archive via the Representational State Transfer (REST) API. This occurs because embedded report access fails to block these specific API download requests. An attacker can recover session material from the archive to access data available to the report owner. If the owner has the admin role, the attacker can perform administrative actions and compromise system integrity.

Recommendations Update to version 10.4.2 or later. Update to version 10.2.6 or later. Update to version 10.0.9 or later. Update to version 9.4.14 or later.