今日共收录 1886 条安全情报，包含 1062 个 CVE，406 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-76365
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Str
CVE-2026-76364
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Str
CVE-2026-76363
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Quer
CVE-2026-76361
In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../c
CVE-2026-76360
In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could use the /rest/health endpoint to
CVE-2026-76359
In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversal in the Universal F
CVE-2026-76358
In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal during app installation
CVE-2026-76357
In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the
CVE-2026-76356
In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to a
CVE-2026-76354
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power"
CVE-2026-76352
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power"
CVE-2026-76350
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_searc
CVE-2026-76349
In Splunk Enterprise versions below 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated use
CVE-2026-76348
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds a Splunk role that contains the
CVE-2026-76346
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could s
CVE-2026-76345
In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can manage search head cluster
CVE-2026-76344
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power"
CVE-2026-76343
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power"
CVE-2026-76342
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could s
CVE-2026-76340
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could cause Splunk Enterprise to reload token-s