CVE-2026-76404

creationtimestamp| type| source ---|---|--- 2026-08-19 23:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjphemr2m 2026-08-20 00:10:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthxfqi6lq2t 2026-08-20 03:00:06+00:00| seen|...

CVE-2026-76404 Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server app

In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is possible because of missing input validation in the app's credential management component, which deserializes stored da...

CVE-2026-76404

The Splunk MCP Server app deserializes stored credential data without type validation, allowing an admin-role user to trigger arbitrary OS command execution. Affected versions are below 1.2.1; no exploitation evidence is provided. Update to version 1.2.1 to remediate. Splunk advisory: https://adv...