SB20261015166 - Multiple vulnerabilities in Splunk Enterprise

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261015166

SB20261015166 - Multiple vulnerabilities in Splunk Enterprise

Published: October 15, 2026

Security Bulletin ID SB20261015166
CSH Severity
High
Patch available
YES
Number of vulnerabilities 5
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 40% Medium 20% Low 40%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 5 vulnerabilities.


1) Improper access control (CVE-ID: CVE-2026-76281)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to improper access restrictions. A remote attacker can bypass implemented security restrictions and compromise the affected system.


2) Improper control of a resource through its lifetime (CVE-ID: CVE-2026-76282)

CWE-ID: CWE-664 - Improper control of a resource through its lifetime

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to potentially disrupt resource management and affect software availability.

The vulnerability exists due to improper control of a resource through its lifetime in Splunk Enterprise when managing software resources. A remote user can potentially trigger incorrect resource lifecycle handling to disrupt normal operation.


3) Protection mechanism failure (CVE-ID: CVE-2026-76283)

CWE-ID: CWE-693 - Protection Mechanism Failure

CVSSv4: 7.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to potentially bypass intended security protections.

The vulnerability exists due to protection mechanism failure in Splunk Enterprise when enforcing security safeguards. A remote user can potentially exploit an ineffective safeguard to bypass its intended protection.


4) Improper Neutralization (CVE-ID: CVE-2026-76284)

CWE-ID: CWE-707 - Improper Neutralization

CVSSv4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to potentially alter how supplied data is interpreted and interfere with intended software behavior.

The vulnerability exists due to improper neutralization in Splunk Enterprise when processing data containing elements with special meaning. A remote attacker can potentially supply data containing insufficiently neutralized elements to alter its interpretation in a downstream processing context.


5) Improper adherence to coding standards (CVE-ID: CVE-2026-76285)

CWE-ID: CWE-710 - Improper Adherence to Coding Standards

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a local user to bypass implemented security restrictions.

The vulnerability exists due to an unspecified issue related to coding standards. A local user can bypass implemented security restrictions. 


Remediation

Install update from vendor's website.

References