Detections
Analytics
Splunk Enterprise 9.4.0 < 9.4.15, 10.0.0 < 10.0.10, 10.2.0 < 10.2.7, 10.4.0 < 10.4.3 (SVD-2026-1001)
high Nessus Plugin ID 363938
Language:
Synopsis
An application running on a remote web server host is affected by multiple vulnerabilities.Description
The version of Splunk Enterprise installed on the remote host is 9.4.x prior to 9.4.15, 10.0.x prior to 10.0.10, 10.2.x prior to 10.2.7, or 10.4.x prior to 10.4.3. It is, therefore, affected by multiple vulnerabilities as referenced in the SVD-2026-1001 advisory, including:- On Linux, a local user who can run commands as the account running Splunk Enterprise could cause an affected Linux package upgrade to run attacker-controlled operating system commands with root privileges.
(CVE-2026-76266)
- A user who does not hold the admin or power roles could access privileged Splunk Secure Gateway REST API functionality and cause it to sign attacker-controlled payloads. (CVE-2026-76265)
- A user who does not hold the admin or power roles could use a user-controlled job identifier to access search job information, including query text and results, belonging to other users. (CVE-2026-76269)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade Splunk Enterprise to version 9.4.15, 10.0.10, 10.2.7, 10.4.3, or later. For CVE-2026-76265, CVE-2026-76272, and CVE-2026-76280, upgrade Splunk Secure Gateway to version 3.8.72, 3.9.25, 3.10.11, or later.See Also
Plugin Details
Severity: High
ID: 363938
File Name: splunk_1043_svd-2026-1001.nasl
Version: 1.3
Type: Combined
Agent: windows, macosx, unix
Family: CGI abuses
Published: 10/7/2026
Updated: 10/12/2026
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5
Percentile: 93.17
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:N/A:N
CVSS Score Source: CVE-2026-76269
CVSS v3
Risk Factor: High
Base Score: 7.7
Temporal Score: 6.7
Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS Score Source: CVE-2026-76266
Vulnerability Information
CPE: cpe:/a:splunk:splunk
Required KB Items: installed_sw/Splunk
Exploit Ease: No known exploits are available
Patch Publication Date: 10/7/2026
Vulnerability Publication Date: 10/7/2026
Reference Information
CVE: CVE-2026-76265, CVE-2026-76266, CVE-2026-76269, CVE-2026-76272, CVE-2026-76273, CVE-2026-76275, CVE-2026-76277, CVE-2026-76279, CVE-2026-76280