Privilege Escalation Issue in Splunk Enterprise by Splunk
CVE-2026-76350

8.8HIGH

Key Information:

Vendor

Splunk
Status
Splunk Enterprise
Vendor
CVE Published:
19 August 2026

What is CVE-2026-76350?

An issue in Splunk Enterprise allows users with the 'schedule_search' capability to exploit email alert actions, potentially executing arbitrary Search Processing Language (SPL) commands with elevated privileges. This occurs when the search scheduler incorrectly uses a system-level authentication context, compromising data integrity and system availability. Users should be aware that affected versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 are vulnerable, enabling unauthorized access to sensitive information through misconfigured alert settings.

Affected Version(s)

Splunk Enterprise 10.4 < 10.4.2

Splunk Enterprise 10.2 < 10.2.6

Splunk Enterprise 10.0 < 10.0.9

References

https://advisory.splunk.com/advisories/SVD-2026-0801

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.