{"id":44346,"date":"2026-10-22T08:42:21","date_gmt":"2026-10-22T00:42:21","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-76287"},"modified":"2026-10-22T08:42:21","modified_gmt":"2026-10-22T00:42:21","slug":"cve-2026-76287","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-76287","title":{"rendered":"CVE-2026-76287 [MEDIUM] &#8211; In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data"},"content":{"rendered":"<p>In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capability or edit_data_management_pipeline_job capability could read or delete Data Management SPL2 preview jobs and results outside their ownership scope.<br \/>\nThe vulnerability is possible because the Data Management Representational State Transfer (REST) API verifies the required capability but does not verify that the requested preview job belongs to the requester.<br \/>\nThe affected Data Management REST API is available only when the Edge Processor feature is turned on. The Edge Processor feature is turned off by default.<br \/>\nFor more information see Set up a data management control plane (https:\/\/help.splunk.com\/en\/splunk-enterprise\/process-data-at-the-edge\/use-edge-processors-for-splunk-enterprise\/10.4\/getting-started\/set-up-a-data-management-control-plane) and Getting sample data for previewing data transformations (https:\/\/help.splunk.com\/en\/splunk-enterprise\/process-data-at-the-edge\/use-edge-processors-for-splunk-enterprise\/10.4\/working-with-pipelines\/getting-sample-data-for-previewing-data-transformations) in the Splunk documentation.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capability or edit_data_management_pipeline_job capability could read or delete Data Mana<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-44346","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/44346","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=44346"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=44346"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=44346"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}