CVE-2026-123858

In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects...

CVE-2026-123858

In JetBrains PhpStorm versions prior to 2026.3 , a vulnerability exists where project files could be automatically uploaded to a deployment server from untrusted projects . This issue is categorized under CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). The vulnerability result...

CVE-2026-123858

In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects...

EUVD-2026-118318

In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects...

org.a2aproject.sdk:a2a-java-sdk-examples-cloud-deployment-server (>=1.0.0.alpha4, <=1.2.0.final) potentially affected by CVE-2026-117506 via org.a2aproject.sdk:a2a-java-extras-push-notification-config-store-database-jpa (>=1.0.0.alpha4, <=1.2.0.final)

org.a2aproject.sdk:a2a-java-extras-push-notification-config-store-database-jpa MAVEN version =1.0.0.alpha4, =1.0.0.alpha4, =1.2.0.final Source cves: CVE-2026-117506 Source advisory: MEND:CVE-2026-117506...

CVE-2026-101034

An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation...

EUVD-2026-110619

An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation...

PT-2026-125884

Name of the Vulnerable Software and Affected Versions Symantec Ghost Solution Suite affected versions not specified Description An issue exists where a hardcoded cryptographic key is used to protect sensitive credentials. An attacker who obtains this key can decrypt domain or service account...

EUVD-2026-63123

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.9, and 9.4.14, an unauthenticated user who can reach the Splunk management port could store a Search Processing Language SPL pipeline that runs when an administrator opens the Add Data forwarder workflow. The SPL pipeline could access all...

CVE-2026-76316

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.9, and 9.4.14, an unauthenticated user who can reach the Splunk management port could store a Search Processing Language SPL pipeline that runs when an administrator opens the Add Data forwarder workflow. The SPL pipeline could access all...

CVE-2026-76316 Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.9, and 9.4.14, an unauthenticated user who can reach the Splunk management port could store a Search Processing Language SPL pipeline that runs when an administrator opens the Add Data forwarder workflow. The SPL pipeline could access all...

CVE-2026-76316 Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.9, and 9.4.14, an unauthenticated user who can reach the Splunk management port could store a Search Processing Language SPL pipeline that runs when an administrator opens the Add Data forwarder workflow. The SPL pipeline could access all...

CVE-2026-76316

An unauthenticated remote attacker who can reach the Splunk management port can register a crafted Deployment Server client identifier, which is then inserted into dispatched searches without special-character sanitization. When an administrator opens the Add Data forwarder workflow, the injected...

PT-2026-78743

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.1 Splunk Enterprise versions prior to 10.2.5 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description An unauthenticated user with access to the management port...

CVE-2026-76316: Improper Neutralization of Special Elements in Data Query Logic

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.9, and 9.4.14, an unauthenticated user who can reach the Splunk management port could store a Search Processing Language SPL pipeline that runs when an administrator opens the Add Data forwarder workflow. The SPL pipeline could access all...

Splunk Web Deployment Server Arbitrary SPL Command Information Disclosure

The vulnerability of the Deployment Server web interface of the Splunk Web platform for operational analysis in Splunk Enterprise relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary SPL commands and disclose sensitive...

Vulnerabilities in Splunk Enterprise and Splunk Cloud Platform

Splunk has identified vulnerabilities in Splunk Enterprise and Splunk Cloud Platform. The first vulnerability relates to insufficient CSRF protection and input validation in the Deployment Server endpoints. This allows attackers to execute arbitrary SPL queries under the Splunk-system-user contex...

CVE-2026-20296

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16, 10.2.2510.18, and 10.1.2507.24, an attacker could trick a user that holds a role with the listdeploymentserver capability into running arbitrary...

EUVD-2026-44737

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16, 10.2.2510.18, and 10.1.2507.24, an attacker could trick a user that holds a role with the listdeploymentserver capability into running arbitrary...

CVE-2026-20296 SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16, 10.2.2510.18, and 10.1.2507.24, an attacker could trick a user that holds a role with the listdeploymentserver capability into running arbitrary...