splunk_advisories
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Jun 10, 2026 00:00 UTC
- Retrieved
- Oct 08, 2026 03:55 UTC
SVD-2026-0605: Improper Input Validation through Classic Dashboards in Splunk Enterprise
In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the “admin” or “power” Splunk roles could craft a malicious classic dashboard that exfiltrates sensitive data to an external server. The vulnerability exists because URL validation on th
Reference details
- Source category
- Vendor advisories
- Report title
SVD-2026-0605: Improper Input Validation through Classic Dashboards in Splunk Enterprise- First reported
- Jun 10, 2026 00:00 UTC
- Last reported
- Jun 10, 2026 00:00 UTC
- Catalog updated
- Oct 08, 2026 03:55 UTC
- Record ID
3f0dd7a1a949c07de09661fc7eb407750f1f20e257d26c252931c8bd4e41d79b
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.