2026-08-21 归档

今日共收录 1701 条安全情报,包含 827 个 CVE,444 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-08-19 发布INFO

In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive AWS credentials by invoking an action t...

CVE-2026-76376

In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive credentials by invoking an action that ...

CVE-2026-76375

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could cause sensitive Active Directory response data to be wri...

CVE-2026-76374

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could inject crafted input into an Active Directory query to e...

CVE-2026-76373

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook w...

CVE-2026-76372

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the add listitem action in a Safe Mode playbook while ...

CVE-2026-76371

In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use the Representational State Transfer (REST) API to view the names and identifie...

CVE-2026-76370

In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use the Representational

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possibl...

CVE-2026-76369

In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Auto

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permission could view metadata about a playbook repository that they are not author...

CVE-2026-76368

In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permission could view meta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript in a note and run it in the browser of another user when t...

CVE-2026-76367

In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer (REST) API filtering on playbook runs to recover session t...

CVE-2026-76366

In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer (

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language (SQL) statements against the Splun...

CVE-2026-76365

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Str

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language (SQL) statements against the Splun...

CVE-2026-76364

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Str

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Query Language (SQL) statements against the Splunk SOAR datab...

CVE-2026-76363

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Quer

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../check_connectivity endpoint to make Splunk SOAR initiate o...

CVE-2026-76361

In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could use the /rest/health endpoint to gather system and cluster telemetry that should be restri...

CVE-2026-76360

In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could use the /rest/health endpoint to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversal in the Universal Forwarder installer's archive extraction to write files ou...

CVE-2026-76359

In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversal in the Universal F

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal during app installation to write files outside the intended temporary directory....

CVE-2026-76358

In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal during app installation

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the Representational State Transfer (REST) API and execute a...

CVE-2026-76357

In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification endpoint and execute arb...

CVE-2026-76356

In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to a

历史摘要 · 未重新核验 · NVD