CVE-2026-76404

creationtimestamp| type| source ---|---|--- 2026-08-19 23:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjphemr2m 2026-08-20 00:10:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthxfqi6lq2t...

CVE-2026-76404

The Splunk MCP Server app deserializes stored credential data without type validation, allowing an admin-role user to trigger arbitrary OS command execution. Affected versions are below 1.2.1; no exploitation evidence is provided. Update to version 1.2.1 to remediate. Splunk advisory: https://adv...