CVE-2026-76312

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.1 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14

Description An unauthenticated user can access sensitive data and compromise system integrity by reading the HTML source of a page that embeds a Splunk report. This occurs because the dispatch archive download path fails to correctly enforce the authorization boundary for embedded reports, resulting in the inclusion of sensitive session material within archived search-job data.

Recommendations Update to version 10.4.1 or later. Update to version 10.2.6 or later. Update to version 10.0.9 or later. Update to version 9.4.14 or later.