Threats Tagged 'cve-2026-76327'

Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise, specifiek in versies vóór 10.4.2, 10.2.6, 10.0.9 en 9.4.14.

CVE-2026-76327 is a vulnerability in Splunk Enterprise and Splunk Secure Gateway where an unauthenticated attacker can trick users with admin or sc_admin roles into opening a crafted URL. This causes dashboard searches to run arbitrary Search Processing Language (SPL) commands with the victim's permissions. The flaw arises from improper neutralization of caller-supplied values in dashboard searches. Exploitation requires phishing to induce the victim to initiate a request in their browser. The vulnerability can expose data accessible to the victim and affect search results or lookup data.

CVE-2026-76327 is a vulnerability in Splunk Enterprise and Splunk Secure Gateway versions prior to specified fixed releases. It allows an unauthenticated attacker to trick an admin or sc_admin user into opening a crafted URL that executes arbitrary Search Processing Language (SPL) commands with the victim's permissions. This occurs because dashboard searches do not properly neutralize user-supplied input, enabling modification of query logic. Exploitation requires phishing the targeted user to initiate the request in their browser. The vulnerability can expose data accessible to the user and affect search results or lookup data.