980 matches found
SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems
Safe agents can fail together. Multi-agent LLM systems MAS move information, state, decisions, and authority across principal boundaries, creating failures that local checks may miss. Without an execution-level view, a multi-agent setting can easily be mistaken for evidence of a genuinely...
CVE-2026-76350
CVE-2026-76350 is an improper privilege management vulnerability in Splunk Enterprise affecting versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 . A user holding the schedule_search role capability can configure PDF attachments in the email alert action workflow. When the alert fires, the search...
CVE-2026-76350 Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedulesearch capability could configure Portable Document Format PDF attachments in the email alert action workflow. When the email alert action runs, it could execute arbitrary Search...
CVE-2026-76350: Improper Privilege Management
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedulesearch capability could configure Portable Document Format PDF attachments in the email alert action workflow. When the email alert action runs, it could execute arbitrary Search...
CVE-2026-76391: Incorrect Authorization
In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run searches with system-level privileges, access all relevant data, affect system integrity, and read or delete search jobs belonging to other users through Agent Run History. The improp...
CVE-2026-76351: Server-Side Request Forgery (SSRF)
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could use crafted report notification data to cause Splunk Secure Gateway to send a request to...
PT-2026-68182
Name of the Vulnerable Software and Affected Versions Google SecOps Chronicle SOAR versions prior to 6.3.85 Description Improper Privilege Management on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access. This is achieved by using a...
CVE-2026-18759
The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...
CVE-2026-18759 An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.
The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...
EUVD-2026-52064
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748...
PT-2026-70737
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions prior to August 2026 Description A use-after-free condition exists in the Windows Ancillary Function Driver for WinSock afd.sys. This issue occurs due to unreliable pointer dereferencing within the Windows...
CVE-2026-15379
CVE-2026-15379 : The Altiris WMI provider exposes the AltirisAgent_Stream class, allowing any local standard user to read files accessible to the SYSTEM context, bypassing filesystem ACLs. The provider uses LocalSystem context for WMI queries without re-impersonating the caller, enabling read acc...
CVE-2026-15684 Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability
Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attacker must first obtain the ability to execute low-privileged code on the target system...
CVE-2026-7162
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
CVE-2026-7162
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
CVE-2026-7162
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
CVE-2026-7162
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
CVE-2026-7162
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
CVE-2026-7162
CVE-2026-7162 involves an integer overflow that could allow an attacker to achieve system-level access to the affected software. The linked sources indicate a local attack vector with high impact (confidentiality, integrity, and availability all rated high) and require no user interaction, with p...