Forwarded from the National Institute of Cyber Security Cybersecurity Alert NISAC-200-202609-00000006

Researchers discovered that Splunk Enterprise contains multiple high-risk security vulnerabilities (CVE-2026-76253, CVE-2026-76310 to CVE-2026-76317, CVE-2026-76319, CVE-2026-76335, and CVE-2026-76350 to CVE-2026-76352). The most severe vulnerability, CVE-2026-76310, is an Improper Access Control vulnerability. If an unauthenticated remote attacker possesses an embedded report token (Token), the attacker may download the dispatch archive file of the associated search job and obtain session-related information from it, thereby accessing data that the report owner is authorized to access and affecting system integrity. If the report owner has the admin role, the attacker may even perform administrative operations. Please confirm and apply patches as soon as possible.