CVE-2026-76139

creationtimestamp| type| source ---|---|--- 2026-08-19 22:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthq6olui527 2026-08-20 14:47:10+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtjig5p2f42w...

CVE-2026-76347

Splunk Secure Gateway's Report Notifications REST API fails to validate notification path values before sending system-authenticated internal requests, allowing non-admin users to trigger SSRF, alter Search Head Cluster state, and cause denial of service. Affected versions: Splunk Enterprise belo...

CVE-2026-76311

Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 are affected by an improper access control flaw in the embedded report authorization flow. The flow fails to block dispatch archive download requests before the archive is sent to the requester, allowing an unauthenticated user p...

CVE-2026-76311 Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the dispatch archive for an embedded report search job and use exposed session material to access all relevant data and affect system integrity on the...

CVE-2026-76310 Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the associated search job dispatch archive, recover session material, and use it to access all relevant data available to the report owner and affect...

CVE-2026-76310

An unauthenticated user with an embedded report token can download the search job dispatch archive via REST API, recover session material, and access all data available to the report owner—including admin-level actions—due to embedded report access not blocking dispatch archive downloads. Affecte...

MINI-HFW5-JFG3-VXH4

Bulletin has no description...

MINI-WX87-H5FJ-M3JW

Bulletin has no description...

MINI-CJM9-QCW3-MQM8

Bulletin has no description...

PT-2026-78774

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Splunk Secure Gateway versions prior to 3.10.9 Splunk Secure Gateway...

PT-2026-78738

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description An unauthenticated user possessing an embedded report token...

CVE-2026-60958

creationtimestamp| type| source ---|---|--- 2026-08-18 22:11:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfadgo37323 2026-08-19 01:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfjqb3fu22t 2026-08-19 17:16:05+00:00| seen|...

CVE-2026-60702

creationtimestamp| type| source ---|---|--- 2026-08-18 22:09:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfa6pevow25 2026-08-18 23:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfepcqxnr2u 2026-08-19 02:41:57+00:00| seen|...

CVE-2026-70877

A CVSS 8.8 HIGH-severity flaw in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) allows low-privileged, network-authenticated attackers via HTTP to fully compromise the application (C/H/I/A all High). Oracle's August 2026 CPU advisory is the patch refere...

CVE-2026-61696

Forem versions before commit 92eacd16a82cf9007ba8e16a2258b42e3b53ca9c render unsanitized feedback_message[message] via raw() in app/views/admin/feedback_messages/_feedback_message.html.erb, enabling stored XSS when an admin views an abuse report. The unauthenticated FeedbackMessagesController acc...

CVE-2026-13242

creationtimestamp| type| source ---|---|--- 2026-08-18 16:39:14+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mtenqor7h222...

CVE-2026-45124

MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permission to mark reports as resolved. The modcp.php?action=doreports Mark Selected as Read handler is reachable with...

EUVD-2026-61018

MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permission to mark reports as resolved. The modcp.php?action=doreports Mark Selected as Read handler is reachable with...

CVE-2026-45124

MyBB (open-source forum software) prior to 1.8.40 contains an authorization flaw in the Mod CP Report Center . The modcp.php?action=do_reports "Mark Selected as Read" handler is reachable with only the canmodcp permission, even when the moderator lacks canmanagereportedcontent or canmanagereporte...

CVE-2026-45124 MyBB: Mod CP report resolution missing authorization

MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permission to mark reports as resolved. The modcp.php?action=doreports Mark Selected as Read handler is reachable with...