EUVD-2026-62953

In Splunk Enterprise Security versions below 8.6.1, a user who holds the essanalyst Splunk Enterprise Security role could change User and Entity Behavior Analytics UEBA search macros that scheduled searches run with administrator permissions, allowing for access to all relevant data and system...

EUVD-2026-62952

In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the mcinvestigationread capability could inject Search Processing Language SPL through Analyst Queue search filters, allowing for access to all relevant data and system integrity...

CVE-2026-55191

creationtimestamp| type| source ---|---|--- 2026-08-19 23:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthumehjgp2t 2026-08-20 00:19:32+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mthxwp2rbi2h...

CVE-2026-76850

creationtimestamp| type| source ---|---|--- 2026-08-19 22:56:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i27euqcjrumpx 2026-08-19 23:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjilr6g2r 2026-08-20 00:10:12+00:00| seen|...

CVE-2026-55085

creationtimestamp| type| source ---|---|--- 2026-08-19 22:11:46+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthqsapxow2m 2026-08-20 01:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mti3cxkjjd2m...

CVE-2026-16862

creationtimestamp| type| source ---|---|--- 2026-08-19 22:10:01+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthqp4jopt2c 2026-08-20 01:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mti3usz4kx23...

CVE-2026-16845

creationtimestamp| type| source ---|---|--- 2026-08-19 22:09:53+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthqotyi6g24 2026-08-20 01:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mti2r3smta2f...

CVE-2026-76387

In Splunk Enterprise Security versions below 8.6.1, the Analyst Queue search filter handling does not validate filter field names before inclusion in SPL searches. A user with the mc_investigation_read capability can inject SPL, gaining access to all data and system integrity available to their s...

CVE-2026-76388

A low-privilege user with the ess_analyst role can modify UEBA search macros that run with admin privileges. Root cause: UEBA app metadata grants analyst roles write access to macros that should be admin-only. Impact: HIGH confidentiality and integrity exposure (CVSS 8.1). Affected: Splunk Enterp...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-25-openjdk-portable: java-25-openjdk-portable-25.0.4.1.1-0.1.hum1 aarch64, x8664 java-25-openjdk-portable-devel-25.0.4.1.1-0.1.hum1 aarch64, x8664...

OpenJDK: Enhance HTTP Connections (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12;...

OpenJDK: Improve font loading (2026-08 Security Update)

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

OpenJDK: Enhance TLS server (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle...

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12;...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-21-openjdk-portable: java-21-openjdk-portable-21.0.12.1.1-0.1.hum1 aarch64, x8664 java-21-openjdk-portable-devel-21.0.12.1.1-0.1.hum1 aarch64, x8664...

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12;...

OpenJDK: Enhance TLS server (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle...

OpenJDK: Enhance HTTP Connections (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12;...

BuildKit: Custom frontend could bypass Seccomp/AppArmor

Impact A custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the build container, even if the user did not explicitly allow the security.insecure entitlement. Other security measures, like Linux capabilities were still applied to these containers...

CVE-2026-16835

creationtimestamp| type| source ---|---|--- 2026-08-19 20:11:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthk3phxuc2p 2026-08-20 00:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthzncgbuo2e...