What is CVE-2026-76345?
This vulnerability affects Splunk Enterprise versions below 10.4.2. A user with a high-privilege role capable of managing search head clustering can use the search head cluster member bundle REST API to write files to arbitrary locations writable by the Splunk service account. Upgrading to Splunk Enterprise version 10.4.2 or higher is recommended.
Azərbaycanca: Bu boşluq Splunk Enterprise-in 10.4.2-dən aşağı versiyalarına təsir edir. Yüksək imtiyazlı rol sahibi search head cluster idarəetmə REST API-si vasitəsilə, Splunk-in işlədiyi hesabın yaza bildiyi ixtiyari yerlərə fayl yaza bilər. Splunk Enterprise-i ən az 10.4.2 versiyasına yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-22; shared vendor: Splunk
FAQ2
Which versions of Splunk Enterprise are affected by CVE-2026-76345?
This vulnerability affects Splunk Enterprise versions below 10.4.2.
What privilege level is required to exploit CVE-2026-76345?
A user with a high-privilege role capable of managing search head clustering can exploit this vulnerability.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.