CVEFinder.io

CVE-2026-76256

🔶 medium
🔍 Scan for this CVE
Summary

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could read sensitive Security Assertion Markup Language setup and instance settings information through Splunk Secure Gateway Representational State Transfer (REST) API endpoints. The vulnerability is possible because the affected Security Assertion Markup Language setup and instance settings REST

Description

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could read sensitive Security Assertion Markup Language setup and instance settings information through Splunk Secure Gateway Representational State Transfer (REST) API endpoints. The vulnerability is possible because the affected Security Assertion Markup Language setup and instance settings REST API endpoints do not enforce authorization requirements before returning configuration information.

CVSS Score
4.3
Medium
EPSS Score
0.2
Exploit Probability
Published Date
2026-08-19
First Seen: 2026-08-20
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 5.3% of all 349,016 vulnerabilities in our database.

#330,380
Below average severity
Severity Percentile
Last Modified 2026-08-20
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE IDs (Weakness Types)
CWE-200

📦 Affected Products 7

Vendor Product Status Affected Versions
splunk splunk Affected
> 10.0.0 < 10.0.9
splunk splunk Affected
> 10.2.0 < 10.2.6
splunk splunk Affected
> 10.4.0 < 10.4.2
splunk splunk Affected
> 9.4.0 < 9.4.14
splunk splunk_secure_gateway Affected
> 3.10.0 < 3.10.9
splunk splunk_secure_gateway Affected
> 3.8.0 < 3.8.70
splunk splunk_secure_gateway Affected
> 3.9.0 < 3.9.23

🔗 References 1

https://advisory.splunk.com/advisories/SVD-2026-0801
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-76251 ⚠️ high 7.1 0.2 In Splunk Enterprise versions below 10.4.2, 10.2.6, and 10.0.9, a user who does not hold the "admin" or "power" Splunk r... 2026-08-19
CVE-2026-76252 🔶 medium 6.8 0.2 In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.13, an unauthenticated user who tricks another user ... 2026-08-19
CVE-2026-76253 ⚠️ high 8.8 0.4 In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_searc... 2026-08-19
CVE-2026-76254 ⚠️ high 7.5 0.3 In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, 9.4.14, and 9.3.14, an unauthenticated user could cause anot... 2026-08-19
CVE-2026-76255 🔶 medium 6.4 0.2 In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.8, and 9.4.13, a user who does not hold the "admin" or "power" ... 2026-08-19
CVE-2026-76257 🔶 medium 6.5 0.3 In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.10... 2026-08-19
These CVEs affect the same products