CVE-2026-76324

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14

Description A user with the "power" role can create a malicious Splunk Web tour to execute arbitrary JavaScript in the browser of another user who opens a crafted tour link. This Cross-Site Scripting (XSS) issue occurs because Splunk Web fails to apply sufficient output encoding when rendering tour content and navigation links, and it accepts a tour selector value that can be interpreted as markup. Successful exploitation allows the attacker to access any data available to the affected user.

Recommendations Update to version 10.4.2 or later. Update to version 10.2.6 or later. Update to version 10.0.9 or later. Update to version 9.4.14 or later.