CVE-2026-76342

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store risky Search Processing Language (SPL) commands in a Table Editor dataset and share the dataset. A user who holds the "admin" Splunk role triggers the commands when that user opens the dataset in the Table Editor. The commands run using the permissions of the second user and could expose all relevant data and modify lookup files. The vulnerability is possible because the Table Editor does not apply SPL safeguards for risky commands to the field-summary search that it runs for the Initial Data step. The vulnerability requires the attacker to phish the affected user by tricking them into initiating a request within their browser. The user who holds the "power" Splunk role should not be able to exploit the vulnerability at will. For more information see SPL safeguards for risky commands (https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/10.2/best-practices-for-splunk-platform-security/spl-safeguards-for-risky-commands) and Define roles on the Splunk platform with capabilities (https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/10.2/manage-splunk-platform-users-and-roles/define-roles-on-the-splunk-platform-with-capabilities) in the Splunk documentation.

• CWE-863

• https://advisory.splunk.com/advisories/SVD-2026-0801Vendor Advisory

Published

Aug 19, 2026

Last Modified

Aug 26, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76337In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …5.3
• CVE-2026-76338In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …8.1
• CVE-2026-76339In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …5.4
• CVE-2026-7634The SlimStat Analytics plugin for WordPress is vulnerable to…7.2
• CVE-2026-76340In Splunk Enterprise 10.4 versions below 10.4.2, an unauthen…5.3
• CVE-2026-76341In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …5.4
• CVE-2026-76343In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …6.5
• CVE-2026-76344In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …7.7
• CVE-2026-76345In Splunk Enterprise versions below 10.4.2, a user with a hi…6
• CVE-2026-76346In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …5.4
• CVE-2026-76347In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …5.4
• CVE-2026-76348In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …3.8