In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security...

CVE-2026-76387

In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the

历史摘要 · 未重新核验 · GitHub Advisory

In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network...

CVE-2026-76362

In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffic between Splunk SOA

历史摘要 · 未重新核验 · GitHub Advisory

In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the...

CVE-2026-76355

In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the information contained in Edg

历史摘要 · 未重新核验 · GitHub Advisory

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold...

CVE-2026-76354

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power"

历史摘要 · 未重新核验 · GitHub Advisory

In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in...

CVE-2026-76356

In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to a

历史摘要 · 未重新核验 · GitHub Advisory

In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a...

CVE-2026-76357

In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the

历史摘要 · 未重新核验 · GitHub Advisory

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway...

CVE-2026-76351

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9,

历史摘要 · 未重新核验 · GitHub Advisory

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role...

CVE-2026-76350

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_searc

历史摘要 · 未重新核验 · GitHub Advisory

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold...

CVE-2026-76352

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power"

历史摘要 · 未重新核验 · GitHub Advisory

logto-tunnel serves files outside --experience-path via path traversal

CVE-2026-63188

### Summary `@logto/tunnel` serves custom sign-in experience files from the `--experience-path` directory. When the tun

历史摘要 · 未重新核验 · GitHub Advisory

Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems

CVE-2026-62673

## Summary The default `.htaccess` shipped with Grav (and the reference `webserver-configs/htaccess.txt`) contains secu

历史摘要 · 未重新核验 · GitHub Advisory

Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover

CVE-2026-55694

### Impact An attacker can completely bypass file-name randomization security and without authorization download confide

历史摘要 · 未重新核验 · GitHub Advisory

GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates

CVE-2024-45747

### Summary A server-side template injection (SSTI) vulnerability exist that allows an authenticated administrator to up

历史摘要 · 未重新核验 · GitHub Advisory

GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)

GeoLens 1.2.4 fixes a set of vulnerabilities, the most serious of which allow authenticated or anonymous users to obtain

历史摘要 · 未重新核验 · GitHub Advisory

XWiki Platform Live Data Live Table Connector has privilege escalation from edit to script right through Live Data editing

CVE-2026-53966

### Impact Any user who can edit a page in XWiki can use Live Data's edit REST API in XWiki to change the rights on that

历史摘要 · 未重新核验 · GitHub Advisory

MCP PHP SDK: client HttpTransport SSE buffer (sseBuffer .= chunk) grows unbounded when server withholds the event delimiter

CVE-2026-53965

## Summary The HTTP client transport in `mcp/sdk` reads a Server-Sent-Events (SSE) response stream incrementally and ap

历史摘要 · 未重新核验 · GitHub Advisory

Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)

CVE-2026-53964

### Impact A remote code execution (RCE) via server-side template injection (SSTI) allows for user supplied code to be e

历史摘要 · 未重新核验 · GitHub Advisory

Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint

CVE-2026-53957

### Summary `export_space` and `import_space` tools in `@contentful/mcp-tools` accept LLM-controlled `host` and `proxy`

历史摘要 · 未重新核验 · GitHub Advisory

Copier has a trust-prefix bypass via path traversal that runs tasks unprompted

CVE-2026-53951

# Copier: trust-prefix bypass via path traversal runs tasks unprompted ### Summary In copier `>= 9.5.0, str: if u

历史摘要 · 未重新核验 · GitHub Advisory

claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

### Summary `claude-faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion + `path.

历史摘要 · 未重新核验 · GitHub Advisory