263417 matches found
PT-2026-107777
An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...
PT-2026-108312
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The HTTP/2 server incorrectly refunds connection-level flow control twice for the same data. This occurs when a client resets a stream, refunding data for the...
CVE-2026-76281
Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures CVE identifier assigned to...
CVE-2026-76282
Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures...
CVE-2025-25347
CVE-2025-25347 개요 이 도구는 작업 자동화 관리를 위한 오픈소스 플랫폼인 QingLong Panel에서 CVE-2025-25347 취약점을 테스트하는 데 사용됩니다. 이 취약점은 패널이 특정 엔드포인트에 적절한 입력 검증 및 접근 제어를 적용하지 않기 때문에 원격 코드 실행RCE을 가능하게 합니다. 그 결과, 유효한 인증이 없는 공격자가 임의의 시스템 명령을 실행할 수 있으며, 이는 QingLong 서버 또는 컨테이너의 완전한 장악으로 이어질 수 있습니다. 개발자: Ohang 감사 인사: My Mentor CAC...
CVE-2026-76282 Improper Control of a Resource Through its Lifetime in Splunk Enterprise
Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures...
CVE-2026-76282
Splunk Enterprise versions 10.4.3 , 10.2.7 , 10.0.10 , and 9.4.15 are affected by CVE-2026-76282 , which involves Improper Control of a Resource Through its Lifetime (CWE-664). Splunk addressed these internally identified vulnerabilities by grouping them by CWE and assigning specific identifiers ...
EUVD-2026-94634
Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures...
EUVD-2026-94633
Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures CVE identifier assigned to...
CVE-2026-76281
Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are affected by an improper access control vulnerability (CWE-284). Splunk internally identified these issues and addressed them in the mentioned versions. Specific technical details regarding the root cause or component are not provi...
CVE-2026-76281 Improper Access Control in Splunk Enterprise
Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures CVE identifier assigned to...
CVE-2026-76272
Splunk Enterprise and Splunk Secure Gateway are vulnerable to an access control flaw via the REST API. In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 , users without "admin" or "power" roles can trigger the gateway to sign attacker-controlled payloads because the system f...
CVE-2026-76272 Missing Access Control through the REST API in Splunk Secure Gateway
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could cause Splunk Secure Gateway to sign attacker-controlled payloads. The vulnerability is possible because Splunk Secure Gateway does not verify that the user i...
CVE-2026-76269 Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could use a user-controlled job identifier to access substantially all search job information from jobs that belong to other users, including search query text, jo...
CVE-2026-76269
Splunk Enterprise versions prior to 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to an improper access control flaw in its REST API . The vulnerability occurs because the API fails to fully validate job ownership when processing a user-controlled job identifier. Consequently, a user without...
CVE-2026-76265 Improper Access Control through REST API Endpoints in Splunk Secure Gateway
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, a user who does not hold the "admin" or "power" Splunk roles could access privileged Splunk Secure Gateway functionality. With this access, the user could...
CVE-2026-76265
Splunk Enterprise (versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15) and Splunk Secure Gateway (versions below 3.10.11, 3.9.25, and 3.8.72) are vulnerable to an improper access control flaw. The root cause is that multiple REST API endpoints in Splunk Secure Gateway fail to enforce authorizatio...
USTP-Secure
USTP USTP means UDP Speedy Transmission Protocol. USTP keeps the same authenticated transport model, but the project name is now simply USTP again. By default, USTP uses AEAD for DATA. It also supports an optional negotiated cleartext + HMAC mode for DATA, where payload bytes are visible on the...
