Threats Tagged 'cve-2026-76345'

Splunk Enterprise versions below 10.4.2 contain a vulnerability where a user with a high-privilege role managing search head clustering can exploit the search head cluster member bundle REST API to write files to locations writable by the Splunk process. This can lead to remote code execution, potentially compromising data confidentiality, integrity, and availability. The issue arises from insufficient authorization checks and lack of validation on bundle paths. The vulnerability does not affect versions below 10.4. No official patch information is provided in the source data.

CVE-2026-76345 is a vulnerability in Splunk Enterprise versions 10.4 up to but not including 10.4.2. It allows a user with a high-privilege role that can manage search head clustering to exploit the search head cluster member bundle REST API to write files to locations writable by the Splunk Enterprise process. This could lead to remote code execution, impacting data confidentiality, integrity, and availability. Versions below 10.4 are not affected.