Splunk Enterprise Security vulnerabilities

2 known vulnerabilities in Splunk Enterprise Security from Splunk. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Splunk Enterprise Security: Incorrect Permission Assignment for Critical Resource

  CVE-2026-76388Aug 19, 2026Splunk

  In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterprise Security role could change User and Entity Behavior Analytics (UEBA) search macros that scheduled searches run with administrator permissions, allowing for a

• 8.1 High severity

  In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise…

  CVE-2026-76387Aug 19, 2026Splunk

  In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the mc_investigation_read capability could inject Search Processing Language (SPL) through Analyst Queue search filters, allowing for access to