Threats Tagged 'cve-2026-76258'

Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise, specifiek in versies vóór 10.4.2, 10.2.6, 10.0.9 en 9.4.14.

A vulnerability in Splunk Enterprise and Splunk Secure Gateway allows non-admin users to register arbitrary companion apps that cause mobile user requests, including sensitive tokens, to be forwarded to attacker-controlled URLs. This occurs due to a hard-coded cryptographic key enabling unrestricted callback URL registration. The issue affects multiple versions below specific fixed releases.

CVE-2026-76258 affects multiple versions of Splunk Enterprise and Splunk Secure Gateway. It involves a hard-coded cryptographic key in the Splunk Secure Gateway companion app registration handler, which allows a non-admin or non-power user to register an arbitrary companion app. This can cause mobile user requests, including sensitive tokens, to be forwarded to an attacker-controlled URL, potentially exposing sensitive data. The vulnerability impacts versions prior to specific fixed releases in both Splunk Enterprise and Splunk Secure Gateway.