CVE-2026-76309 | Splunk Enterprise up to 9.4.13/10.0.8/10.2.5/10.4.1 REST API filter sql injection

August 20, 2026 Yanac

A vulnerability classified as critical was found in Splunk Enterprise up to 9.4.13/10.0.8/10.2.5/10.4.1. Affected is an unknown function of the component REST API. Executing a manipulation of the argument filter can lead to sql injection.

This vulnerability appears as CVE-2026-76309. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More