CVE-2026-76270

In Splunk Enterprise versions below 10.4.3, a user that holds a role with the list_spl2_modules capability could use SQL injection in SPL2 module filtering to access all relevant data available through the affected Representational State Transfer (REST) API, including private SPL2 module definitions belonging to other users. The vulnerability is possible because Splunk Enterprise and Splunk Cloud Platform do not parameterize user-supplied values before using them in database queries for SPL2 module filtering. For more information see Manage SPL2 modules (https://help.splunk.com/en/splunk-enterprise/search/spl2-search-manual/multiple-searches-in-an-spl2-module/manage-spl2-modules) and Module permissions (https://help.splunk.com/en/splunk-enterprise/search/spl2-search-manual/modules-statements-and-views/module-permissions) in the Splunk documentation. Splunk Enterprise versions 10.2.x, 10.0.x, and 9.4.x are not affected.

• CWE-89

• https://advisory.splunk.com/advisories/SVD-2026-1001

Published

Oct 7, 2026

Last Modified

Oct 9, 2026

Status

Undergoing Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76265In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,…6.5
• CVE-2026-76266In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,…7.7
• CVE-2026-76267In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0…4.3
• CVE-2026-76268In Splunk Enterprise versions below 10.4.3 and 10.2.7, an un…9.8
• CVE-2026-76269In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,…6.5
• CVE-2026-7627A security vulnerability has been detected in 8nite metatrad…6.3
• CVE-2026-76271In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0…6.5
• CVE-2026-76272In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,…4.3
• CVE-2026-76273In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,…4.3
• CVE-2026-76274In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0…6.5
• CVE-2026-76275In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,…4.3
• CVE-2026-76276In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0…4.3