Skip to content
OpenAdvisories

Product · Splunk

Splunk Enterprise Security

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-76388

    Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security

    In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterprise Security role could change User and Entity Behavior Analytics (UEBA) search macros that scheduled searches run with administrator permissions, allowing for …

    Splunk Splunk Enterprise Security
  • High 8.1
    CVE-2026-76387

    SPL Injection through the REST API in Splunk Enterprise Security

    In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the mc_investigation_read capability could inject Search Processing Language (SPL) through Analyst Queue search filters, allowing for access t…

    Splunk Splunk Enterprise Security