CVE-2026-76331

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14

Description Users without admin or power roles can inject Search Processing Language (SPL) into saved-search dispatch requests. This occurs because the system fails to correctly validate caller-supplied time values before using them in the dispatch process, potentially leading to unauthorized data access and compromised system integrity.

Recommendations Update to version 10.4.2 or later. Update to version 10.2.6 or later. Update to version 10.0.9 or later. Update to version 9.4.14 or later.