Threats Tagged 'cve-2026-76329'

Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise, specifiek in versies vóór 10.4.2, 10.2.6, 10.0.9 en 9.4.14.

Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 contain a vulnerability where an unauthenticated attacker can trick an admin user into opening a crafted Monitoring Console link. This causes the system to execute attacker-controlled Search Processing Language (SPL) commands with the admin user's permissions. The flaw arises from insufficient validation of data used in dashboard searches. Exploitation requires phishing the admin user to open the malicious link, and the attacker cannot exploit the vulnerability without user interaction.

CVE-2026-76329 is a vulnerability in Splunk Enterprise versions prior to 10.4.2, 10.2.6, 10.0.9, and 9.4.14. It allows an unauthenticated attacker to trick an admin user into opening a crafted Monitoring Console link that executes attacker-controlled Search Processing Language (SPL) commands with the admin's permissions. This can lead to exposure of data accessible to the admin or modification of lookup data. Exploitation requires phishing the admin user to open the malicious link. The vulnerability arises from insufficient validation of data used in dashboard searches within the Monitoring Console.