← Back

CVE-2026-76348

nvd nist
Published: Aug 19, 2026Modified: Aug 21, 2026

JSON object

Loading...
3.8
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
Exploitability: 1.2 / Impact: 2.5
Source: psirt@cisco.com (Secondary)

Description

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds a Splunk role that contains the high-privilege list_search_head_clustering capability could send a read request to Search Head Cluster member control endpoints and change cluster state, which could allow for a denial of service. The vulnerability is possible because the Search Head Cluster member control endpoints do not require a state-changing Hypertext Transfer Protocol (HTTP) request type before they apply read-only authorization.

Affected (4)

Products: Splunk: Splunk
Splunk
1 product
Splunk
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Splunk
Splunk
From 10.0.0 to 10.0.9
Splunk
From 10.2.0 to 10.2.6
Splunk
From 10.4.0 to 10.4.2
Splunk
From 9.4.0 to 9.4.14

Related CWEs

CWE-862
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (1)

Source: psirt@cisco.com
Vendor Advisory

Timeline

No history available yet.