CVE-2026-76337— Splunk Enterprise 静态文件服务路径遍历漏洞
Affected Version Matrix 4
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Splunk | Splunk Enterprise | 10.4< 10.4.2 | affected |
10.2< 10.2.6 | affected | ||
10.0< 10.0.9 | affected | ||
9.4< 9.4.14 | affected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-76337の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Path Traversal through Splunk Web Static File Serving in Splunk Enterprise
ソース: CVE Program / CVE List V5
脆弱性説明
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could read JavaScript files outside the Splunk Web static directory. The vulnerability is possible because Splunk Web does not restrict static file requests to the configured static directory.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
ソース: CVE Program / CVE List V5
脆弱性タイプ
对路径名的限制不恰当(路径遍历)
ソース: CVE Program / CVE List V5
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Splunk | Splunk Enterprise | 10.4 ~ 10.4.2 | - |
II. CVE-2026-76337の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-76337のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Splunk · 2026-08-19 · 110 CVEs total
| CVE-2026-76311 | 9.4 CRITICAL | Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise |
| CVE-2026-76312 | 9.4 CRITICAL | Improper Access Control through Embedded Reports in Splunk Enterprise |
| CVE-2026-76310 | 9.4 CRITICAL | Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise |
| CVE-2026-76404 | 9.1 CRITICAL | Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server |
| CVE-2026-76335 | 8.8 HIGH | Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise |
| CVE-2026-76351 | 8.8 HIGH | Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secu |
| CVE-2026-76253 | 8.8 HIGH | Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterpr |
| CVE-2026-76315 | 8.8 HIGH | Code Injection through Splunk Web Manager Configuration in Splunk Enterprise |
| CVE-2026-76352 | 8.8 HIGH | Improper Authorization through the REST API in Splunk Enterprise |
| CVE-2026-76317 | 8.8 HIGH | Path Traversal through the Lookup Configuration REST API in Splunk Enterprise |
| CVE-2026-76313 | 8.8 HIGH | Remote Code Execution (RCE) through the REST API in Splunk Enterprise |
| CVE-2026-76395 | 8.8 HIGH | Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading |
| CVE-2026-76389 | 8.8 HIGH | Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for En |
| CVE-2026-76350 | 8.8 HIGH | Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk En |
| CVE-2026-76319 | 8.8 HIGH | Remote Code Execution (RCE) through Federated Search in Splunk Enterprise |
| CVE-2026-76314 | 8.8 HIGH | Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise |
| CVE-2026-76259 | 8.8 HIGH | Improper Privilege Management on the Management Port in Splunk Enterprise for Windows |
| CVE-2026-76316 | 8.8 HIGH | Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise |
| CVE-2026-76391 | 8.3 HIGH | Improper Privilege Management through Agent Run History in Splunk AI Toolkit |
| CVE-2026-76394 | 8.3 HIGH | Missing Authorization in Container and Connection Management through the REST API in Splun |
Showing 20 of 110 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Splunk Enterprise
- CVE-2026-76355
Unauthenticated Information Disclosure through an Edge Proce - CVE-2026-76353
Path Traversal through Knowledge Bundle Replication in Splun - CVE-2026-76354
Path Traversal through Search Head Clustering in Splunk Ente - CVE-2026-76352
Improper Authorization through the REST API in Splunk Enterp - CVE-2026-76351
Server-Side Request Forgery (SSRF) through the Report Notifi
同じベンダー: Splunk
- CVE-2026-76405
Information Disclosure through Cleartext Storage in the App - CVE-2026-76403
Improper Certificate Validation through HTTP Event Collector - CVE-2026-76404
Remote Code Execution (RCE) through Deserialization of Untru - CVE-2026-76401
Regular Expression Denial of Service (DoS) through the REST - CVE-2026-76402
Server-Side Request Forgery (SSRF) through the REST API in S
同じ弱点: CWE-22
- CVE-2026-48105
Arc Enterprise cluster FSM applyRegisterFile accepts arbitra - CVE-2026-47735
Arc has an authenticated arbitrary local-file read via DuckD - CVE-2026-64679
Atlantis: Path Traversal in Atlantis Workspace Handling Allo - CVE-2026-44517
Buildah: Build breakout using malicious Containerfile and Gi - CVE-2026-45099
Terragrunt: Arbitrary File Deletion via Malicious Module Man
V. CVE-2026-76337へのコメント
まだコメントはありません