CVE-2026-76255: In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.8, and 9.4.13, a user who does not hold the "admin" or "power"

In Splunk Enterprise versions before 10.4.1, 10.2.6, 10.0.8, and 9.4.13, a low-privilege user can trick another user into running harmful commands through the Data Model Editor by sending them a malicious link (phishing attack). These commands could access data and damage the system because Splunk Web doesn't properly filter risky SPL commands (Search Processing Language, the query language Splunk uses) in this specific tool.