CVE-2026-76326

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14

Description A user without admin or power roles can store a dashboard view that executes JavaScript in the browser of another user who opens the dashboard and hovers over a sparkline table cell. This occurs because the dashboard table renderer fails to sufficiently restrict tooltip options or escape tooltip content before display, potentially granting access to the victim user's data and system integrity.

Recommendations Update Splunk Enterprise to version 10.4.2 or later. Update Splunk Enterprise to version 10.2.6 or later. Update Splunk Enterprise to version 10.0.9 or later. Update Splunk Enterprise to version 9.4.14 or later.