What is CVE-2026-76337?
This critical vulnerability allows an unauthenticated user to read JavaScript files outside the configured static directory in Splunk Web. It affects older versions of Splunk Enterprise and could lead to potential exposure of sensitive information. Immediate update to versions 10.4.2, 10.2.6, 10.0.9, or 9.4.14 is strongly recommended.
Azərbaycanca: Bu kritik zəiflik autentifikasiya olunmamış istifadəçiyə Splunk Web'in konfiqurasiya edilmiş statik direktoriyasından kənarda yerləşən JavaScript fayllarını oxumağa imkan verir. Splunk Enterprise-in köhnə versiyalarına təsir edir və potensial olaraq həssas məlumatların sızmasına səbəb ola bilər. Administrativ olaraq, 10.4.2, 10.2.6, 10.0.9 və ya 9.4.14 versiyalarına təcili yeniləmə aparmaq tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-22; shared vendor: Splunk
FAQ2
How does CVE-2026-76337 affect Splunk products?
This critical vulnerability allows an unauthenticated user to read JavaScript files outside the configured static directory in Splunk Web.
Which versions should I upgrade to address CVE-2026-76337?
Immediate update to versions 10.4.2, 10.2.6, 10.0.9, or 9.4.14 is strongly recommended.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.