Information Disclosure Vulnerability in Splunk Enterprise and Splunk Secure Gateway
CVE-2026-76295

4.3MEDIUM

Key Information:

Vendor

Splunk
Status
Splunk Enterprise
Splunk Secure Gateway
Vendor
CVE Published:
21 October 2026

What is CVE-2026-76295?

In select versions of Splunk Enterprise and Splunk Secure Gateway, users lacking 'admin' or 'power' roles can view dashboards and report listings outside their authorized filter scope. This occurs due to an improper handling of special characters when creating filters, allowing unauthorized users to access more information than intended. Organizations are advised to review their deployments and ensure they are running the latest secure versions to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Splunk Enterprise 10.4 < 10.4.4

Splunk Enterprise 10.2 < 10.2.8

Splunk Enterprise 10.0 < 10.0.11

References

https://advisory.splunk.com/advisories/SVD-2026-1007

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Gabriel Nitu, Splunk
.