22253 matches found
Splunk Universal Forwarder 9.4.0 < 9.4.13, 10.0.0 < 10.0.8, 10.2.0 < 10.2.5, 10.4 < 10.4.1 (SVD-2026-0706)
The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0706 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
Splunk Enterprise 9.3.0 < 9.3.14, 9.4.0 < 9.4.13, 10.0.0 < 10.0.8, 10.2.0 < 10.2.5, 10.4.0 < 10.4.1 (SVD-2026-0703)
The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0703 advisory. - In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below...
PT-2026-60234
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.1 Splunk Enterprise versions prior to 10.2.5 Splunk Enterprise versions prior to 10.0.8 Splunk Enterprise versions prior to 9.4.13 Splunk Enterprise versions prior to 9.3.14 Splunk Cloud Platform versio...
CVE-2026-20297: Improper Limitation of a Pathname to a Restricted Directory
In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.2.2510.18, and 10.1.2507.24, a user who holds a role that contains the editlocalapps and installapps capabilities could cause a legitimate app...
PT-2026-60233
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.1 Splunk Enterprise versions prior to 10.2.5 Splunk Enterprise versions prior to 10.0.8 Splunk Enterprise versions prior to 9.4.13 Splunk Cloud Platform versions prior to 10.5.2605.0 Splunk Cloud Platfo...
CVE-2026-20296: Cross-Site Request Forgery (CSRF)
In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16, 10.2.2510.18, and 10.1.2507.24, an attacker could trick a user that holds a role with the listdeploymentserver capability into running arbitrary...
PT-2026-60235
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.1 Splunk Enterprise versions prior to 10.2.5 Splunk Enterprise versions prior to 10.0.8 Splunk Enterprise versions prior to 9.4.13 Splunk Cloud Platform versions prior to 10.5.2605.0 Splunk Cloud Platfo...
CVE-2026-20298: Exposure of Sensitive Information to an Unauthorized Actor
In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.3.2512.15, 10.2.2510.18, and 10.1.2507.24, a low-privileged user that does not hold the 'admin' or 'power' Splunk roles could view stored credential hashes...
Splunk Enterprise REST API Code Execution
The vulnerability of the REST API implementation of the Splunk Enterprise platform for operational analysis is related to the lack of measures taken at the management level when processing the unarchivecmd parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Splunk Web Unauthorized Access
The vulnerability in the Splunk Web platform for operational analysis in Splunk Enterprise relates to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Splunk Enterprise REST API Code Execution
The vulnerability of the REST API interface implementation of the Splunk Enterprise platform for operational analysis is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Splunk Enterprise Unauthorized Access
The vulnerability of the splunkd component of the Splunk Enterprise platform relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Splunk Enterprise REST API Unauthorized Access
The vulnerability of the REST API interface implementation of the Splunk Enterprise platform for operational analysis is related to the disclosure of information. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
bigml (>=9.8.0, <=9.8.1), neuroflow-yalab (>=0.1.8, <=0.1.9) +2 more potentially affected by CVE-2026-59890 via setuptools (69.0.0)
setuptools PYPI version 69.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bigml =9.8.0, =0.1.8, =3.8.1, =3.9.1 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...
bigml (>=9.8.0, <=9.8.1), neuroflow-yalab (>=0.1.8, <=0.1.9) +2 more potentially affected by CVE-2024-6345 via setuptools (69.0.0)
setuptools PYPI version 69.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bigml =9.8.0, =0.1.8, =3.8.1, =3.9.1 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...
Splunk MCP Server Data Compromise
The vulnerability of the Splunk MCP Server data processing and analysis application is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Splunk Enterprise Access Control Data Compromise
The vulnerability of the Splunk Enterprise platform for operational analysis is related to access control errors, which allow attackers to compromise the integrity of the protected information...
Splunk Enterprise Data Compromise
The vulnerability of the Splunk Enterprise platform for operational analysis is related to improper handling of data with Unicode encoding. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Splunk Web Platform Code Execution
The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise relates to insecure temporary files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
