CVE-2026-76336

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions 10.2 through 10.2.5 Splunk Enterprise versions 10.4.0 through 10.4.1

Description An issue exists where the SPL2 module management Representational State Transfer (REST) API does not sufficiently authorize and validate module deletion requests. This allows a user without the admin or power roles to delete all Search Processing Language 2 (SPL2) modules across all apps and users on the instance. Such an action could result in the deletion of exported datasets and functions, compromising system integrity and causing partial service disruption.

Recommendations Update Splunk Enterprise versions 10.2.x to 10.2.6. Update Splunk Enterprise versions 10.4.x to 10.4.2.