CVE-2026-76291 | Splunk Enterprise up to 9.4.15/10.0.10/10.2.7/10.4.3 Search Scheduler authorize.conf improper authorization

A vulnerability was found in Splunk Enterprise up to 9.4.15/10.0.10/10.2.7/10.4.3 and classified as very critical. Affected by this issue is some unknown functionality of the file authorize.conf of the component Search Scheduler. Such manipulation leads to improper authorization.

This vulnerability is referenced as CVE-2026-76291. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More