【資安漏洞預警】Splunk Enterprise存在多項高風險安全漏洞，請儘速確認並進行修補

【行政公告】

公告單位	圖資處網路系統組
訊息類別	行政公告行政公告	公告對象	全體
公告主題	【資安漏洞預警】Splunk Enterprise存在多項高風險安全漏洞，請儘速確認並進行修補【Security Vulnerability Alert】Splunk Enterprise Contains Multiple High-Risk Security Vulnerabilities, Please Confirm and Patch as Soon as Possible
公告內容	轉發國家資安資訊分享與分析中心資安訊息警訊 NISAC-200-202609-00000006 [內容說明] 研究人員發現Splunk Enterprise存在多項高風險安全漏洞(CVE-2026-76253、CVE-2026-76310至CVE-2026-76317、CVE-2026-76319、CVE-2026-76335及CVE-2026-76350至CVE-2026-76352)，其中最嚴重之CVE-2026-76310為不當存取控制(Improper Access Control)漏洞，未經身分鑑別之遠端攻擊者若持有嵌入式報表令牌(Token)，可下載相關搜尋工作的派送封存檔，並從中取得工作階段相關資訊，進而存取報表擁有者可存取之資料，並影響系統完整性。若報表擁有者具admin角色時，攻擊者甚至可執行管理作業，請儘速確認並進行修補。 [影響平台] Splunk Enterprise 9.4.0至9.4.13、10.0.0至10.0.8、10.2.0至10.2.5及10.4.0至10.4.1版本 [建議措施] 官方已針對漏洞釋出修補程式，請升級Splunk Enterprise至9.4.14、10.0.9、10.26或10.4.2(含)以後版本。詳細說明請參考官方公告，網址如下： https://advisory.splunk.com/advisories/SVD-2026-0801 [參考資料] 1. https://nvd.nist.gov/vuln/detail/CVE-2026-76253 2. https://nvd.nist.gov/vuln/detail/CVE-2026-76310 3. https://nvd.nist.gov/vuln/detail/CVE-2026-76311 4. https://nvd.nist.gov/vuln/detail/CVE-2026-76312 5. https://nvd.nist.gov/vuln/detail/CVE-2026-76313 6. https://nvd.nist.gov/vuln/detail/CVE-2026-76314 7. https://nvd.nist.gov/vuln/detail/CVE-2026-76315 8. https://nvd.nist.gov/vuln/detail/CVE-2026-76316 9. https://nvd.nist.gov/vuln/detail/CVE-2026-76317 10. https://nvd.nist.gov/vuln/detail/CVE-2026-76319 11. https://nvd.nist.gov/vuln/detail/CVE-2026-76335 12. https://nvd.nist.gov/vuln/detail/CVE-2026-76350 13. https://nvd.nist.gov/vuln/detail/CVE-2026-76351 14. https://nvd.nist.gov/vuln/detail/CVE-2026-76352 15. https://advisory.splunk.com/advisories/SVD-2026-0801 Forwarded from National Information Sharing and Analysis Center Cybersecurity Information Alert NISAC-200-202609-00000006 [Content Description] Researchers discovered that Splunk Enterprise contains multiple high-risk security vulnerabilities(CVE-2026-76253、CVE-2026-76310 to CVE-2026-76317、CVE-2026-76319、CVE-2026-76335 and CVE-2026-76350 to CVE-2026-76352). Among them, the most severe, CVE-2026-76310, is an Improper Access Control vulnerability. If an unauthenticated remote attacker possesses an embedded report token(Token), they can download the dispatch archive of the relevant search job and obtain session-related information from it, thereby accessing data accessible to the report owner and affecting system integrity. If the report owner has the admin role, the attacker may even perform administrative operations. Please confirm and patch as soon as possible. [Affected Platforms] Splunk Enterprise versions 9.4.0 to 9.4.13、10.0.0 to 10.0.8、10.2.0 to 10.2.5 and 10.4.0 to 10.4.1 [Recommended Measures] The official source has released patches for the vulnerabilities. Please upgrade Splunk Enterprise to version 9.4.14、10.0.9、10.26 or 10.4.2(inclusive) or later versions. For detailed information, please refer to the official advisory at the following URL: https://advisory.splunk.com/advisories/SVD-2026-0801 [References] 1. https://nvd.nist.gov/vuln/detail/CVE-2026-76253 2. https://nvd.nist.gov/vuln/detail/CVE-2026-76310 3. https://nvd.nist.gov/vuln/detail/CVE-2026-76311 4. https://nvd.nist.gov/vuln/detail/CVE-2026-76312 5. https://nvd.nist.gov/vuln/detail/CVE-2026-76313 6. https://nvd.nist.gov/vuln/detail/CVE-2026-76314 7. https://nvd.nist.gov/vuln/detail/CVE-2026-76315 8. https://nvd.nist.gov/vuln/detail/CVE-2026-76316 9. https://nvd.nist.gov/vuln/detail/CVE-2026-76317 10. https://nvd.nist.gov/vuln/detail/CVE-2026-76319 11. https://nvd.nist.gov/vuln/detail/CVE-2026-76335 12. https://nvd.nist.gov/vuln/detail/CVE-2026-76350 13. https://nvd.nist.gov/vuln/detail/CVE-2026-76351 14. https://nvd.nist.gov/vuln/detail/CVE-2026-76352 15. https://advisory.splunk.com/advisories/SVD-2026-0801
相關訊息
公告時間	2026/9/7 至 2027/3/7	點閱次數	270