Vulnerabilities fixed in Splunk Enterprise

Splunk has addressed multiple vulnerabilities in Splunk Enterprise. Various vulnerabilities exist in Splunk Enterprise versions prior to 10.4.4 and a few other specific versions. These include: - Improper validation in the Data Management REST API, allowing users with certain roles to create or...

EUVD-2026-107661

In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download endpoint in the Splunk Pipeline Builders app. The requests could cause the Splunk daemon to consume excessive system resources and potential...

CVE-2026-76290

In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download endpoint in the Splunk Pipeline Builders app. The requests could cause the Splunk daemon to consume excessive system resources and potential...

Splunk Enterprise resource management error vulnerability

Versions prior to Splunk Enterprise 10.4.4, 10.2.8, and 10.0.11 contain a resource management error vulnerability. This vulnerability arises because the Edge Processor package download endpoint accepts package download requests without validation. On each request, the full package is read from...

Splunk: CVE-2026-76290: Security Vulnerabilities in Splunk Enterprise - October 2026

In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download endpoint in the Splunk Pipeline Builders app. The requests could cause the Splunk daemon to consume excessive system resources and potential...

PT-2026-120848

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.4 Splunk Enterprise versions prior to 10.2.8 Splunk Enterprise versions prior to 10.0.11 Description An unauthenticated user can send repeated requests to the Edge Processor package download endpoint in...

CVE-2026-113505

A flaw has been found in aaPanel up to 8.25.0. Impacted is the function sendfile of the file BTPanel/routes/v2.py of the component Download Endpoint. Executing a manipulation of the argument filename can lead to path traversal. The attack can be executed remotely. The exploit has been published a...

CVE-2026-113505 aaPanel Download Endpoint v2.py send_file path traversal

A flaw has been found in aaPanel up to 8.25.0. Impacted is the function sendfile of the file BTPanel/routes/v2.py of the component Download Endpoint. Executing a manipulation of the argument filename can lead to path traversal. The attack can be executed remotely. The exploit has been published a...

EUVD-2026-105174

A flaw has been found in aaPanel up to 8.25.0. Impacted is the function sendfile of the file BTPanel/routes/v2.py of the component Download Endpoint. Executing a manipulation of the argument filename can lead to path traversal. The attack can be executed remotely. The exploit has been published a...

CVE-2026-113505 aaPanel Download Endpoint v2.py send_file path traversal

A flaw has been found in aaPanel up to 8.25.0. Impacted is the function sendfile of the file BTPanel/routes/v2.py of the component Download Endpoint. Executing a manipulation of the argument filename can lead to path traversal. The attack can be executed remotely. The exploit has been published a...

CVE-2026-113505

A path traversal vulnerability exists in aaPanel up to version 8.25.0 within the Download Endpoint component. The flaw is located in the send_file function of the BTPanel/routes/v2.py file, where improper handling of the filename argument allows for remote path traversal. While an exploit has bee...

PT-2026-118491

A flaw has been found in aaPanel up to 8.25.0. Impacted is the function send file of the file BTPanel/routes/v2.py of the component Download Endpoint. Executing a manipulation of the argument filename can lead to path traversal. The attack can be executed remotely. The exploit has been published...

CVE-2026-73504

The raw Actions artifact download endpoint looks up the artifact row before validating the signed URL. Without authentication, an invalid signature produces one response when the supplied global artifact ID belongs to the named repository and is upload-confirmed or expired and a different respons...

CVE-2026-105630 Plane: Stored XSS via SVG attachment served inline on the application origin (account takeover)

Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, including a Guest, can upload an image/svg+xml file as a generic or issue attachment. The file retains the attacker-controlled Content-Type, and the asset-download endpoint creates a...

CVE-2026-105630

The Plane project management tool is vulnerable to Stored XSS in versions prior to 1.4.0 . An authenticated low-privilege user, such as a Guest, can upload an image/svg+xml file as an attachment. Because the file retains its attacker-controlled Content-Type and the asset-download endpoint provide...

EUVD-2026-92543

Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, including a Guest, can upload an image/svg+xml file as a generic or issue attachment. The file retains the attacker-controlled Content-Type, and the asset-download endpoint creates a...

CVE-2026-105630

Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, including a Guest, can upload an image/svg+xml file as a generic or issue attachment. The file retains the attacker-controlled Content-Type, and the asset-download endpoint creates a...

CVE-2026-105630 Plane: Stored XSS via SVG attachment served inline on the application origin (account takeover)

Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, including a Guest, can upload an image/svg+xml file as a generic or issue attachment. The file retains the attacker-controlled Content-Type, and the asset-download endpoint creates a...

PT-2026-102394

Name of the Vulnerable Software and Affected Versions Dozzle versions prior to 11.1.2 Description Insufficient sanitization of container display names occurs when building ZIP archive entry names in the log download endpoint. Attackers with the ability to label containers can employ path traversa...

CVE-2026-102332: Improper Limitation of a Pathname to a Restricted Directory

Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. Attackers who can label containers can use path traversal sequences to write files outside the extraction directory when users download and extract logs...