Threats tagged 'ghsa-24c4-mg94-gv8m'

Multiple improper access control vulnerabilities were identified and addressed in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. These vulnerabilities are grouped under CWE-284 and assigned a single CVE identifier CVE-2026-76281. The vulnerabilities allow unauthorized access to certain resources or functions, potentially leading to limited confidentiality impact. The CVSS score is 5.3 (medium severity), indicating a network attack vector with no privileges or user interaction required. No known exploits are reported in the wild, and no patch links are provided in the data.