CVE-2026-76278 Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the editspl2modulepermissions capability could use the affected Representational State Transfer REST API to access permission grants for SPL2 modules that the user does not have permission to view. The...

CVE-2026-76278

Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10 are vulnerable to an authorization bypass in the SPL2 module permissions. A user with the edit_spl2_module_permissions capability can use the affected REST API to access permission grants for SPL2 modules they are not authorized to view...

CVE-2026-76275 Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could access search query text and job metadata for jobs that belong to other users, including job identifiers, dispatch parameters, result counts, and execution...

CVE-2026-76275

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 , an improper authorization vulnerability exists in the REST API . Users lacking "admin" or "power" roles can access search query text and job metadata—including job identifiers, dispatch parameters, result counts, and execut...

EUVD-2026-94624

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could cause Splunk Secure Gateway to sign attacker-controlled payloads. The vulnerability is possible because Splunk Secure Gateway does not verify that the user i...

EUVD-2026-94617

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, a user who does not hold the "admin" or "power" Splunk roles could access privileged Splunk Secure Gateway functionality. With this access, the user could...

CVE-2026-76264 Improper Authorization through the REST API in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could create or edit scripted lookup definitions through raw configuration endpoints. The vulnerability is possible because raw transforms configuration write path...

CVE-2026-76264

Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.10, and 9.4.15 are vulnerable to an improper authorization flaw via the REST API. An attacker with low-level privileges (not holding admin or power roles) can create or edit scripted lookup definitions using raw configuration endpoints. This i...

GHSA-4HMC-CFM3-W43C Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers

Summary Langflow's project-scoped MCP transport authenticates the caller for the projectid in the connection URL, but the subsequent resources/read operation does not authorize the resource URI being requested. An authenticated user can connect to their own project-scoped MCP endpoint and supply ...

Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers

Summary Langflow's project-scoped MCP transport authenticates the caller for the projectid in the connection URL, but the subsequent resources/read operation does not authorize the resource URI being requested. An authenticated user can connect to their own project-scoped MCP endpoint and supply ...

Payload has a tenant authorization bypass in Multi-Tenant Plugin

Impact When using the default tenant array field access, an authenticated user could assign themselves to other tenants. You are affected if: - You are using @payloadcms/plugin-multi-tenant If you configure the tenants arrayFieldAccess.create/update functions, a secured replacement membership...

GHSA-P96C-XWX8-3CQJ Payload has a tenant authorization bypass in Multi-Tenant Plugin

Impact When using the default tenant array field access, an authenticated user could assign themselves to other tenants. You are affected if: - You are using @payloadcms/plugin-multi-tenant If you configure the tenants arrayFieldAccess.create/update functions, a secured replacement membership...

EUVD-2026-94615

Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata AWS account identifiers and SQL statement text from other AWS accounts. Query results, credentials, and Amazon S3 data were not affected. AWS...

CVE-2026-107352

The Amazon Athena engine version 3 contained a vulnerability due to missing authorization checks in request handling. This flaw could have allowed an authenticated user to read limited query metadata , specifically AWS account identifiers and SQL statement text , from other AWS accounts. The vuln...

CVE-2026-107352 Missing authorization checks in Amazon Athena engine version 3 request handling

Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata AWS account identifiers and SQL statement text from other AWS accounts. Query results, credentials, and Amazon S3 data were not affected. AWS...

CVE-2026-96335

Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through 1.57.2...

GHSA-X3MG-Q38V-M562 Ghost: Authorization Issue Allowed Author Role to Delete any Post

Impact Staff with the Author role could delete posts and pages that they did not author. Vulnerable versions This vulnerability is present in Ghost from v5.81.0 up to v6.60.0. Patches v6.60.0 contains a fix for this issue. How to update For self-hosters using Docker, find Docker's official Ghost...

NPM: Ghost: Authorization Issue Allowed Author Role to Delete any Post

NPM: Ghost: Authorization Issue Allowed Author Role to Delete any Post vulnerability discovered by ? in WordPress Npm ghost versions = 5.81.0, 6.60.0...

Ghost: Authorization Issue Allowed Author Role to Delete any Post

Impact Staff with the Author role could delete posts and pages that they did not author. Vulnerable versions This vulnerability is present in Ghost from v5.81.0 up to v6.60.0. Patches v6.60.0 contains a fix for this issue. How to update For self-hosters using Docker, find Docker's official Ghost...

GHSA-9325-VQ29-GP3V Backstage has incorrect authorization in search engine permission filtering

Impact An authenticated Backstage user subject to a DENY policy for search document types could receive search results they were not authorized to view. This affects deployments with permission.enabled: true and an Elasticsearch or OpenSearch search backend. Patches - Upgrade...