CVE-2026-76319

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14

Description A low-privileged user without the fsh manage capability can achieve Remote Code Execution through Federated Search bundle selection. This occurs because the Federated Search dispatch flow accepts bundle selection controlled by the caller without enforcing the necessary capability to manage federated providers and indexes, potentially compromising system integrity, availability, and data access.

Recommendations Update to version 10.4.2 or later. Update to version 10.2.6 or later. Update to version 10.0.9 or later. Update to version 9.4.14 or later.