CVE-2026-76267 Log Injection through the REST API in Splunk App for Splunk O11y Cloud

In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the reado11ycontent capability could inject forged entries into the app log through the Representational State Transfer REST API. The vulnerability is possible because Splunk App for Splunk O11y Cloud...

CVE-2026-76267

In Splunk Enterprise versions below 10.4.3 , 10.2.7 , and 10.0.10 , a log injection vulnerability exists within the Splunk App for Splunk O11y Cloud . An attacker with the read_o11y_content capability can inject forged entries into the application log via the REST API . This occurs because the ap...

CVE-2026-76267 Log Injection through the REST API in Splunk App for Splunk O11y Cloud

In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the reado11ycontent capability could inject forged entries into the app log through the Representational State Transfer REST API. The vulnerability is possible because Splunk App for Splunk O11y Cloud...

lback-framework (>=0.1.0, <=1.0.1), ncalab (0.1.0) +6 more potentially affected by CVE-2026-0994 via protobuf (4.25.7)

protobuf PYPI version 4.25.7 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - lback-framework =0.1.0, =1.3.2, =0.27.0b1, =0.47.0b1, =1.0.0b1, =0.3.0b5, =0.37.0b1, =1.8.0b1 Source cves: CVE-2026-0994 Source advisory:...