CVE-2026-62906

creationtimestamp| type| source ---|---|--- 2026-09-04 04:15:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3muo43ovisx2u 2026-09-08 22:01:10+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:04+00:00| seen|...

CVE-2026-62906 Microsoft Discovery Studio Information Disclosure Vulnerability

...

CVE-2026-62906 Microsoft Discovery Studio Information Disclosure Vulnerability

...

CVE-2026-62906

Microsoft Discovery Studio is affected by an improper neutralization of special elements in data query logic , allowing an unauthorized attacker to disclose information over a network . The vulnerability is rated CVSS 7.4 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N, meaning it req...

EUVD-2026-62906

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store attacker-controlled Search Processing Language SPL in a Table Editor dataset and share the dataset. A user who holds the "admin" Splunk role triggers the SPL when that user...