GCVE-110-NCSC-2026-322

Advisory PublishedCVSS 8.1/10

Vulnetix · Advisory published August 21, 2026

Certain versions of Splunk Enterprise prior to 10.4.1, 10.2.6, 10.0.9, and 9.4.14 contain a vulnerability in the dispatch archive download path allowing unauthenticated users to access sensitive session data via embedded reports.

Download JSON Open in Console

Weaknesses (CWE)

CWE-862Missing AuthorizationCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-943Improper Neutralization of Special Elements in Data Query LogicCWE-321Use of Hard-coded Cryptographic KeyCWE-732Incorrect Permission Assignment for Critical ResourceCWE-639Authorization Bypass Through User-Controlled KeyCWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CWE-94Improper Control of Generation of Code ('Code Injection')CWE-26Path Traversal: '/dir/../filename'CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')CWE-352Cross-Site Request Forgery (CSRF)CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-863Incorrect AuthorizationCWE-27Path Traversal: 'dir/../../filename'CWE-918Server-Side Request Forgery (SSRF)CWE-24Path Traversal: '../filedir'CWE-158Improper Neutralization of Null Byte or NUL CharacterCWE-306Missing Authentication for Critical Function

Risk Scores

CVSS 3.1

8.1/10

High · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Splunk	vers:unknown/*	—	—

Aliases

CVE-2026-76251 CVE-2026-76252 CVE-2026-76253 CVE-2026-76254 CVE-2026-76255 CVE-2026-76256 CVE-2026-76257 CVE-2026-76258 CVE-2026-76259 CVE-2026-76260 CVE-2026-76261 CVE-2026-76262 CVE-2026-76263 CVE-2026-76309 CVE-2026-76310 CVE-2026-76311 CVE-2026-76312 CVE-2026-76313 CVE-2026-76314 CVE-2026-76315 CVE-2026-76316 CVE-2026-76317 CVE-2026-76318 CVE-2026-76319 CVE-2026-76320 CVE-2026-76321 CVE-2026-76322 CVE-2026-76323 CVE-2026-76324 CVE-2026-76325 CVE-2026-76326 CVE-2026-76327 CVE-2026-76328 CVE-2026-76329 CVE-2026-76330 CVE-2026-76331 CVE-2026-76332 CVE-2026-76333 CVE-2026-76334 CVE-2026-76335 CVE-2026-76336 CVE-2026-76337 CVE-2026-76338 CVE-2026-76339 CVE-2026-76340 CVE-2026-76341 CVE-2026-76342 CVE-2026-76343 CVE-2026-76344 CVE-2026-76345 CVE-2026-76346 CVE-2026-76347 CVE-2026-76348 CVE-2026-76349 CVE-2026-76350 CVE-2026-76351 CVE-2026-76352 CVE-2026-76353 CVE-2026-76354 CVE-2026-76355

References

advisory

Browse GCVE Records

417 records in the GCVE database · Updated August 26, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON