CVE-2026-76322

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14

Description A user with the "user" role can create a Dashboard Studio dashboard containing malicious Search Processing Language (SPL) that executes when accessed by another authenticated user. This occurs because Dashboard Studio fails to consistently enforce app-visibility authorization boundaries before search query options are dispatched. An attacker must use phishing to trick a target user into initiating the request via their browser. Successful exploitation allows the attacker to access sensitive data and compromise system integrity and availability.

Recommendations Update to version 10.4.2 or later. Update to version 10.2.6 or later. Update to version 10.0.9 or later. Update to version 9.4.14 or later.