Threats Tagged 'cve-2026-76354'
View all threats tagged with 'cve-2026-76354'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-76354'
Click on any threat for detailed analysis and mitigation recommendations
Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 contain a vulnerability where non-admin and non-power users can send crafted REST API requests to delete or temporarily overwrite files writable by the Splunk process on non-captain search head cluster members. This occurs due to improper validation of replicated bundle file names and failure to neutralize NUL bytes during bundle path construction in Search Head Clustering. Join the discussion | GCVE Database | 08/20/2026, 00:35:02 UTC Added: 08/20/2026, 14:09:15 UTC |
CVE-2026-76354 is a high-severity vulnerability in Splunk Enterprise affecting versions 9.4 through 9.4.14, 10.0 through 10.0.9, 10.2 through 10.2.6, and 10.4 through 10.4.2. It allows users without admin or power roles to send crafted REST API requests that can delete or temporarily overwrite files writable by the Splunk Enterprise process on non-captain search head cluster members. The issue arises from improper handling of NUL bytes in bundle replication paths during search head clustering, which can affect system integrity and availability. Join the discussion | CVE Database V5 | 08/19/2026, 21:34:47 UTC Added: 08/19/2026, 21:38:33 UTC |
Showing 1 to 2 of 2 results