CVE-2026-76309

4.3 Moyenne

Publiée le 20/08/2026 à 00:17 · Modifiée le 26/08/2026 à 18:16 · Analysée par le NVD · Source : psirt@cisco.com

Description

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that does not hold the "admin" or "power" Splunk roles could inject Structured Query Language (SQL) through the Representational State Transfer (REST) API, causing Splunk Enterprise to evaluate attacker-controlled text as part of a database query. The SQL injection is possible because the REST API incorporates user-supplied filter values into database queries without proper neutralization.

Traduire en français

Produits concernés

Splunk Enterprise
Splunk splunk

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.3 Moyenne	psirt@cisco.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-89

Références

https://advisory.splunk.com/advisories/SVD-2026-0801 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories