CVE-2026-76261
MEDIUM
MEDIUM
Priority: 0.02
BB Relevance:
63/100
Published: 2026-08-19
Modified: 2026-10-26
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
None
A:
None
Description
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could read Spacebridge asymmetric private keys, which are secrets that compromise affected Spacebridge private-key material stored in the app collection, through the Splunk Secure Gateway App Key Value Store Representational State Transfer (REST) API. The vulnerability is possible on instances upgraded from older Splunk Secure Gateway deployments when the private-key migration remains incomplete, leaving key material in a collection with an insecure default access control list.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| splunk | splunk | 9.4.0 – 9.4.14 |
| splunk | splunk_secure_gateway | 3.8.0 – 3.8.70 |
References & Advisories (1)
Mitigation
Vendor Advisory