# CVE-2026-76340: Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise

> CVE-2026-76340: Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise. CVSS 5.3 (CVSS 3.1).

Canonical: https://rewindex.com/cve/CVE-2026-76340
Last updated: 2026-08-26T16:16:40Z

- Published: 2026-08-19 21:34 UTC · Updated: 2026-08-26 16:16 UTC · Assigner: cisco
- CVSS: 5.3 (CVSS 3.1) · Severity: Medium · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- EPSS: 0.37%, 31th percentile (scored 2026-10-25)
- CISA KEV: no
- CWE: CWE-862

## Description

In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could cause Splunk Enterprise to reload token-signing keys through the Representational State Transfer (REST) API. The vulnerability does not affect Splunk Enterprise versions below 10.4. The vulnerability is possible because the REST API does not require authentication or the change\_authentication capability for the token-key reload action. For more information see Define roles on the Splunk platform with capabilities (https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/10.4/manage-splunk-platform-users-and-roles/define-roles-on-the-splunk-platform-with-capabilities) in the Splunk documentation.

## Affected vendors and products

- Splunk: Splunk Enterprise

## Tracked companies

- [Splunk](https://rewindex.com/company/splunk.md)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2026-76340)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2026-76340)
- [https://advisory.splunk.com/advisories/SVD-2026-0801](https://advisory.splunk.com/advisories/SVD-2026-0801)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2026-76340 · Markdown: https://rewindex.com/cve/CVE-2026-76340.md · JSON: https://rewindex.com/api/v1/cves/CVE-2026-76340 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:09:47.557Z