Threats Tagged 'cve-2026-76318'

Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise, specifiek in versies vóór 10.4.2, 10.2.6, 10.0.9 en 9.4.14.

Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 contain a vulnerability where a user with the schedule_search capability can store a malicious script in an alert trigger condition field. When another user opens the crafted link, the script executes in their browser and can access all data available to that user. This occurs because Splunk Web does not properly escape special characters in the alert threshold value used in alert trigger condition markup. Exploitation requires user interaction by opening the malicious link.

CVE-2026-76318 is a cross-site scripting (XSS) vulnerability in Splunk Enterprise versions prior to 10.4.2, 10.2.6, 10.0.9, and 9.4.14. It allows a user with the schedule_search capability to store malicious scripts in alert trigger condition fields. When another user opens a crafted link containing this script, it executes in their browser and can access data available to that user. The issue arises because Splunk Web does not properly escape special characters in alert threshold values used in alert trigger condition markup.