CVE-2026-76347

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Splunk Secure Gateway versions prior to 3.10.9 Splunk Secure Gateway versions prior to 3.9.23 Splunk Secure Gateway versions prior to 3.8.70

Description A Server-Side Request Forgery (SSRF) issue exists in report notifications. This occurs because Splunk Secure Gateway fails to validate report notification path values before sending internal requests. A user without "admin" or "power" roles can exploit this to send system-authenticated requests to internal services, potentially leading to a denial of service or unauthorized changes to the Search Head Cluster state.

Recommendations Update Splunk Enterprise to version 10.4.2 or later. Update Splunk Enterprise to version 10.2.6 or later. Update Splunk Enterprise to version 10.0.9 or later. Update Splunk Enterprise to version 9.4.14 or later. Update Splunk Secure Gateway to version 3.10.9 or later. Update Splunk Secure Gateway to version 3.9.23 or later. Update Splunk Secure Gateway to version 3.8.70 or later.