EUVD-2026-62908

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Query Language SQL queries through the Data Orchestration jobs endpoint, allowing for access to substantially all data stor...

CVE-2026-76343

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Query Language SQL queries through the Data Orchestration jobs endpoint, allowing for access to substantially all data stor...

CVE-2026-76343

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, the Data Orchestration jobs endpoint builds SQL queries from user-controlled job filter values without parameterized queries. A non-admin user can inject SQL, accessing all Data Orchestration data and stored credentials (CVSS...

PT-2026-78770

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description Users without admin or power roles can execute arbitrary...

GO-2023-1900 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-5148 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines-fips, kubeflow-pipelines-driver-fips, kubeflow-pipelines, argo-workflows-fips...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: vcluster, kubernetes-csi-driver-hostpath, yunikorn-k8shim, rancher-fleet, rancher-system-agent, mesosphere-vsphere-csi, cloud-provider-gcp-cloud-controller-manager, emissary, docker-machine-driver-harvester...

GO-2025-4023 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: nri-prometheus, local-static-provisioner, amazon-cloudwatch-agent, kubernetes-dns-node-cache, doppler-kubernetes-operator, oauth2-proxy, go-bindata, nri-kafka, kubernetes-dashboard, portieris, apko, influx, spiffe-helper, frp, nri-haproxy, cloud-provider-aws, ollama,...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.6 security update

Important: Red Hat OpenShift GitOps v1.19.6 security update An update is now available for Red Hat OpenShift GitOps...

Eopi-Hunt-Skill

Eopi-Hunt-Skill Authorized security research toolkit comb...

Agentic AI Security: The Chatbot Era Is Already Over

There is a diagram most security teams still carry in their heads when they think about AI. A user talks to a chatbot. The chatbot talks to a large language model. The model talks back. Put an inspection point in the middle, and the problem is solved. That diagram was accurate for about eighteen...

Mallory Unifies Threat Intelligence, Exposure Context, and Response Into One Architecture for Security Teams

Las Vegas, United States, 4th August 2026, CyberNewswire...

Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject...

PYSEC-2026-642 Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject...

sentinel

Sentinel — Agentic Code & System Quality Guardian Production-...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: prometheus, kubernetes, step, docker-cli-buildx, knative-serving, telegraf, cilium, chisel, gitlab-kas, flux-source-controller, pulumi-language-java, gitlab-runner, flux-image-automation-controller, crossplane-provider-azure-sql, argocd-image-updater,...

overflow_exploit_framework

kernel-research — Framework CVE overflow Usage éducatif uni...

EUVD-2026-36087

In Splunk SOAR Security Orchestration, Automation, and Response versions below 8.5.0, an unauthenticated attacker could inject American National Standards Institute ANSI escape codes into SOAR application log files through specially crafted HTTP request paths, which a terminal emulator might...

Containers on fire: from container escapes to supply chain attacks

Introduction Modern infrastructures universally rely on containerization to deploy applications, scale services, and build cloud platforms. The use of Docker, Kubernetes, and similar technologies has become the corporate standard for efficient automation. However, as containers grow in popularity...