CVE-2025-36398

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an externally controlled filename...

CVE-2026-76832 Agno PythonTools Path Traversal via joinpath file_name argument

Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent-directory traversal sequences in the filename argument passed to readfile, savetofile, or runpythonfile tool actions...

CVE-2026-76832

CVE-2026-76832 is a path traversal vulnerability in Agno 's PythonTools (libs/agno/agno/tools/python.py). The file_name argument in the read_file, save_to_file, and run_python_file tool actions does not properly sanitize parent-directory traversal sequences, allowing an attacker to escape the int...

CVE-2026-76832 Agno PythonTools Path Traversal via joinpath file_name argument

Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent-directory traversal sequences in the filename argument passed to readfile, savetofile, or runpythonfile tool actions...

CVE-2026-76369 Path Traversal through Automation Broker in Splunk SOAR

In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possible because Automation Broker log uploads accept crafted filename input before writing log files. For more information see...

CVE-2026-76369

CVE-2026-76369 is a path traversal vulnerability in Splunk SOAR versions below 8.6.0 . A user holding the OnPrem Broker role can write files outside the intended Automation Broker log directory by supplying crafted filename input during log uploads. The root cause is insufficient validation of fi...

CVE-2026-76359 Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR

In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversal in the Universal Forwarder installer's archive extraction to write files outside the intended installation directory. The vulnerability is possible because the Universal Forwarder...

CVE-2026-76359

CVE-2026-76359 is a path traversal vulnerability in Splunk SOAR (On-premises) versions below 8.6.0 . The Universal Forwarder installer's credentials-package extraction workflow does not verify that each archive member remains within the intended destination directory before extraction. A user wit...

CVE-2026-76357

In Splunk SOAR on-premises versions below 8.6.0, the REST API fails to enforce role requirements and does not confine user-supplied file paths to the temporary directory, enabling an authenticated, role-less user to submit crafted paths and achieve arbitrary code execution (CVSS 7.6, HIGH). No in...

CVE-2026-76358 Path Traversal through App Installation Tar Extraction in Splunk SOAR

In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal during app installation to write files outside the intended temporary directory. The vulnerability is a path traversal in the archive extraction routine, which does not validate that extracted file...

CVE-2026-76358

In Splunk SOAR versions below 8.6.0, the app-installation archive extraction routine fails to validate extracted file paths, allowing users with app-install privileges to write files outside the intended temporary directory, enabling arbitrary file overwrite (HIGH integrity/availability impact, C...

CVE-2026-76357 Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR

In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the Representational State Transfer REST API and execute arbitrary code. The vulnerability is possible because the REST API does not require an assigned role for the request and do...

CVE-2026-76354

Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 are affected by a path traversal vulnerability in the Search Head Clustering bundle replication mechanism. The root cause is that the system does not validate replicated bundle file names or neutralize NUL bytes before constructi...

CVE-2026-76354 Path Traversal through Search Head Clustering in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could affect system integrity and availability by sending a crafted Representational State Transfer REST API request that deletes or temporarily overwrites files...

CVE-2026-76353 Path Traversal through Knowledge Bundle Replication in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could submit a crafted knowledge bundle delta to delete arbitrary files accessible to Splunk Enterprise on a cluster manager. This could affect system integrity and...

CVE-2026-76353

CVE-2026-76353 is a path traversal vulnerability in Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 . The root cause is that knowledge bundle delta processing does not restrict removal paths to the staging directory, and the endpoint does not enforce the expected authorization...

CVE-2026-76345 Remote Code Execution (RCE) through the REST API in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can manage search head clustering could use the search head cluster member bundle Representational State Transfer REST API to write files to locations that the user account running Splunk Enterprise can writ...

CVE-2026-76344

Splunk Enterprise fails to validate search identifiers supplied to the Search Dispatch REST API, letting any non-admin user write dispatch metadata to arbitrary host paths. CVSS 3.1 base score 7.7 (HIGH), network attack vector, low privileges required. Affected branches: 9.4.x, 10.0.x, 10.2.x, 10...

CVE-2026-76337

CVE-2026-76337 is a path traversal vulnerability in Splunk Enterprise affecting versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 . The root cause is that Splunk Web does not restrict static file requests to the configured static directory, allowing an unauthenticated attacker to read JavaScript ...

CVE-2026-76317

Splunk Enterprise lookup configuration REST API fails to resolve source paths before boundary checks, enabling non-admin users to exfiltrate files into controlled lookups. Affected versions: 9.4.14, 10.0.9, 10.2.6, 10.4.2 and below. CVSS 8.8 HIGH. No in-the-wild exploitation reported. See https:/...