CVE-2026-76295: The application generates a query intended to access or manipulate data in a data store such as a database, but it does not neutralize or incorrectly neutralizes special elements that can modify the intended logic of the query. in Splunk Splunk Enterprise

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a vulnerability exists where users lacking admin or power roles can bypass intended filter restrictions on dashboard and report listings. This occurs because the application does not properly neutralize special characters in values used to create filters, allowing modification of query logic and unauthorized viewing of data listings beyond the user's filter scope. The issue is due to insufficient input sanitization in Splunk Secure Gateway when processing dashboard and report requests.

The vulnerability allows users with limited privileges (not holding admin or power roles) to view dashboard and report listings beyond the filters that should restrict their access. This results in unauthorized information disclosure within the scope of objects the user can access. There is no indication of data manipulation or denial of service impact. The CVSS score of 4.3 reflects a limited confidentiality impact with no integrity or availability impact.

A fix is available in Splunk Enterprise versions 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions 3.10.12, 3.9.26, and 3.8.73. Users should upgrade to these versions or later to remediate the vulnerability. No vendor advisory content was provided to indicate alternative mitigations or temporary workarounds. Patch status is confirmed by the provided affected version ranges indicating fixed versions.