CVE-2026-76329

creationtimestamp| type| source ---|---|--- 2026-08-20 04:46:21+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CVE-2026-76316

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:50+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-21 23:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtmwink3bv24...

CVE-2026-76315

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:48+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-21 23:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtmuszamoh23...

GHSA-FXF9-RXPJ-26GX vulnerabilities

Vulnerabilities for packages: wget...

GO-2026-6188 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-66141 vulnerabilities

Vulnerabilities for packages: exim...

EUVD-2026-63135

Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent-directory traversal sequences in the filename argument passed to readfile, savetofile, or runpythonfile tool actions...

EUVD-2026-62934

In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possible because Automation Broker log uploads accept crafted filename input before writing log files. For more information see...

EUVD-2026-62923

In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal during app installation to write files outside the intended temporary directory. The vulnerability is a path traversal in the archive extraction routine, which does not validate that extracted file...

EUVD-2026-62909

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could write dispatch metadata to an arbitrary location on the host by supplying a crafted search identifier to a Representational State Transfer REST API endpoint a...

CVE-2026-77080: Improper Neutralization of Special Elements used in an OS Command

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an arbitrary file read and write vulnerability in the Snowflake node, which passes free-form Execute Query input, including client-side commands, directly to the Snowflake SDK without applying n8n's file-access restrictions...

PT-2026-78889

Name of the Vulnerable Software and Affected Versions Royal Addons for Elementor versions prior to 1.7.1066 Description Insufficient sanitization of custom widget markup occurs before it is written to a file that is subsequently executed. This allows users with the manage options capability, as...

PT-2026-78935

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions 2.x prior to 2.33.4 n8n versions 2.34.x prior to 2.34.1 Description The Snowflake node allows an authenticated user with valid Snowflake credentials to perform arbitrary file read and write operation...

PT-2026-79053

Name of the Vulnerable Software and Affected Versions Banks versions prior to 2.4.5 Description The DirectoryPromptRegistry.set function in src/banks/registries/directory.py fails to perform canonicalization or containment validation when interpolating Prompt.name and Prompt.version values into a...

PT-2026-79236

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Local attackers can overwrite arbitrary files because the system does not properly resolve symbolic links, which are shortcuts that point to another file or directory...

Linux Distros Unpatched Vulnerability : CVE-2026-76222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths...

RHEL 10 : rh-podman-desktop (RHSA-2026:57590)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:57590 advisory. Red Hat build of Podman Desktop is a graphical tool for managing containers using Podman. It allows users to run, manage, and configure...

PT-2026-78905

A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal sequences such as ../ can escape the intended extraction directory and write files to arbitrary locations on the server, potentially achieve arbitrary code execution due to improper validation of...

PT-2026-79061

Name of the Vulnerable Software and Affected Versions VictoriaMetrics versions prior to 1.122.25 VictoriaMetrics versions prior to 1.136.12 VictoriaMetrics versions prior to 1.146.0 Description The vmrestore tool fails to validate backup part path components before writing restored data below...

PT-2026-83653

Executive Summary Two vulnerabilities were identified and chained to achieve authenticated remote code execution The first vulnerability allows any authenticated admin to redirect the file upload storage root to an arbitrary path on disk including the application directory itself by supplying an...