Improper Input Validation in Splunk Enterprise Dashboard Studio
CVE-2026-76334

6.4MEDIUM

Key Information:

Vendor

Splunk
Status
Splunk Enterprise
Vendor
CVE Published:
19 August 2026

What is CVE-2026-76334?

In Splunk Enterprise, users with the 'power' role can create workflow actions in Dashboard Studio that include maliciously crafted Search Processing Language (SPL). If an authenticated user activates this action, the system runs the injected SPL with their permissions, potentially allowing unauthorized access to sensitive data. This vulnerability arises from insufficient validation of workflow-action URLs, enabling attackers to exploit it through user phishing techniques, requiring user action to trigger the attack.

Affected Version(s)

Splunk Enterprise 10.4 < 10.4.2

Splunk Enterprise 10.2 < 10.2.6

Splunk Enterprise 10.0 < 10.0.9

References

https://advisory.splunk.com/advisories/SVD-2026-0801

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.