Source Code Exposure in Splunk Enterprise by Low-Privileged Users
CVE-2026-76276

4.3MEDIUM

Key Information:

Vendor

Splunk
Status
Splunk Enterprise
Vendor
CVE Published:
7 October 2026

What is CVE-2026-76276?

In Splunk Enterprise versions prior to 10.4.3, 10.2.7, and 10.0.10, a vulnerability exists where low-privileged users can access original source code from the Discover Splunk Observability Cloud app via Splunk Web. This occurs because the application’s production JavaScript bundles contain embedded source maps that unintentionally expose the original source code. As a result, users without 'admin' or 'power' roles may exploit this issue to obtain sensitive code, which could lead to further security risks.

Affected Version(s)

Splunk Enterprise 10.4 < 10.4.3

Splunk Enterprise 10.2 < 10.2.7

Splunk Enterprise 10.0 < 10.0.10

References

https://advisory.splunk.com/advisories/SVD-2026-1001

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Gabriel Nitu, Splunk
.