CVE-2026-76389

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the gettalosenrichment capability could send a crafted request to the Talos intelligence enrichment Representational State Transfer REST API endpoint and cause the instance to make an...

CVE-2026-76388

In Splunk Enterprise Security versions below 8.6.1, a user who holds the essanalyst Splunk Enterprise Security role could change User and Entity Behavior Analytics UEBA search macros that scheduled searches run with administrator permissions, allowing for access to all relevant data and system...

CVE-2026-76387

In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the mcinvestigationread capability could inject Search Processing Language SPL through Analyst Queue search filters, allowing for access to all relevant data and system integrity...

CVE-2026-55085

creationtimestamp| type| source ---|---|--- 2026-08-19 22:11:46+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthqsapxow2m 2026-08-20 01:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mti3cxkjjd2m 2026-08-20 12:40:04+00:00| seen|...

CVE-2026-16919

creationtimestamp| type| source ---|---|--- 2026-08-19 22:11:27+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthqrofgb423 2026-08-20 02:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mti6o7oolp2j 2026-08-21 09:07:06+00:00| seen|...

CVE-2026-16882

creationtimestamp| type| source ---|---|--- 2026-08-19 22:10:32+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthqpzpsnb2e 2026-08-20 01:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mti4gpztkc2b 2026-08-21 10:07:06+00:00| seen|...

CVE-2026-16862

creationtimestamp| type| source ---|---|--- 2026-08-19 22:10:01+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthqp4jopt2c 2026-08-20 01:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mti3usz4kx23 2026-08-25 06:37:07+00:00| seen|...

CVE-2026-16845

creationtimestamp| type| source ---|---|--- 2026-08-19 22:09:53+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthqotyi6g24 2026-08-20 01:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mti2r3smta2f 2026-08-25 08:07:07+00:00| seen|...

Important: Red Hat Security Advisory: postfix security update

An update for postfix is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2026-76584

creationtimestamp| type| source ---|---|--- 2026-08-19 22:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthq6vglus2r 2026-08-21 00:00:08+00:00| published-proof-of-concept| Telegram/87w5sTCGBPeMw8h3c2UBbBkEJEqeSW1iUUAENsR3qsz5w...

CVE-2026-16832

creationtimestamp| type| source ---|---|--- 2026-08-19 21:42:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mthp6owhvr2m 2026-08-28 06:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu4qr7q7ar2v...

CVE-2026-16828

creationtimestamp| type| source ---|---|--- 2026-08-19 21:41:17+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mthp3pdnog2z...

CVE-2026-76388 Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security

In Splunk Enterprise Security versions below 8.6.1, a user who holds the essanalyst Splunk Enterprise Security role could change User and Entity Behavior Analytics UEBA search macros that scheduled searches run with administrator permissions, allowing for access to all relevant data and system...

CVE-2026-76387

In Splunk Enterprise Security versions below 8.6.1, the Analyst Queue search filter handling does not validate filter field names before inclusion in SPL searches. A user with the mc_investigation_read capability can inject SPL, gaining access to all data and system integrity available to their s...

CVE-2026-76388

A low-privilege user with the ess_analyst role can modify UEBA search macros that run with admin privileges. Root cause: UEBA app metadata grants analyst roles write access to macros that should be admin-only. Impact: HIGH confidentiality and integrity exposure (CVSS 8.1). Affected: Splunk Enterp...

CVE-2026-76387 SPL Injection through the REST API in Splunk Enterprise Security

In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the mcinvestigationread capability could inject Search Processing Language SPL through Analyst Queue search filters, allowing for access to all relevant data and system integrity...

CVE-2026-68899

creationtimestamp| type| source ---|---|--- 2026-08-19 21:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthmtpf6tj2b...

CVE-2026-68561

creationtimestamp| type| source ---|---|--- 2026-08-19 21:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthmtiilr52t 2026-08-21 00:00:08+00:00| published-proof-of-concept| Telegram/87w5sTCGBPeMw8h3c2UBbBkEJEqeSW1iUUAENsR3qsz5w...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-25-openjdk-portable: java-25-openjdk-portable-25.0.4.1.1-0.1.hum1 aarch64, x8664 java-25-openjdk-portable-devel-25.0.4.1.1-0.1.hum1 aarch64, x8664...

OpenJDK: Enhance HTTP Connections (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12;...