agentprime: splunk-enterpriseEvery new CVE for splunk-enterprise.https://agentprime.io/CVE-2026-76302: Security Hardening in Splunk Enterprise - October 2026https://agentprime.io/advisories/CVE-2026-76302/https://agentprime.io/advisories/CVE-2026-76302/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:03 GMTCVEcriticalCVE-2026-76301: Security Hardening in Splunk Enterprise - October 2026https://agentprime.io/advisories/CVE-2026-76301/https://agentprime.io/advisories/CVE-2026-76301/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:02 GMTCVEcriticalCVE-2026-76300: Security Hardening in Splunk Enterprise - October 2026https://agentprime.io/advisories/CVE-2026-76300/https://agentprime.io/advisories/CVE-2026-76300/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:02 GMTCVECVE-2026-76299: Security Hardening in Splunk Enterprise - October 2026https://agentprime.io/advisories/CVE-2026-76299/https://agentprime.io/advisories/CVE-2026-76299/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:01 GMTCVEcriticalCVE-2026-76298: Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76298/https://agentprime.io/advisories/CVE-2026-76298/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:00 GMTCVECVE-2026-76297: Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76297/https://agentprime.io/advisories/CVE-2026-76297/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:51:59 GMTCVECVE-2026-76296: Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76296/https://agentprime.io/advisories/CVE-2026-76296/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:51:58 GMTCVECVE-2026-76295: SPL Injection through the REST API in Splunk Secure Gatewayhttps://agentprime.io/advisories/CVE-2026-76295/https://agentprime.io/advisories/CVE-2026-76295/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:51:57 GMTCVECVE-2026-76294: Improper Access Control in Field Extraction Management in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76294/https://agentprime.io/advisories/CVE-2026-76294/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:51:56 GMTCVECVE-2026-76293: Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76293/https://agentprime.io/advisories/CVE-2026-76293/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:51:55 GMTCVECVE-2026-76292: Missing Authorization through REST API Endpoints in Splunk Secure Gatewayhttps://agentprime.io/advisories/CVE-2026-76292/https://agentprime.io/advisories/CVE-2026-76292/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:51:54 GMTCVECVE-2026-76291: Improper Access Control through Scheduled Search Safeguards in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76291/https://agentprime.io/advisories/CVE-2026-76291/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:51:53 GMTCVECVE-2026-76290: Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76290/https://agentprime.io/advisories/CVE-2026-76290/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:51:52 GMTCVECVE-2026-76289: Denial of Service (DoS) through the REST API in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76289/https://agentprime.io/advisories/CVE-2026-76289/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:51:51 GMTCVECVE-2026-76288: Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76288/https://agentprime.io/advisories/CVE-2026-76288/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:51:50 GMTCVECVE-2026-76287: Authorization Bypass in the Data Management REST API in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76287/https://agentprime.io/advisories/CVE-2026-76287/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:51:49 GMTCVECVE-2026-76285: Improper Adherence to Coding Standards in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76285/https://agentprime.io/advisories/CVE-2026-76285/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:39 GMTCVEcriticalCVE-2026-76284: Improper Neutralization in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76284/https://agentprime.io/advisories/CVE-2026-76284/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:39 GMTCVEcriticalCVE-2026-76283: Protection Mechanism Failure in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76283/https://agentprime.io/advisories/CVE-2026-76283/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:38 GMTCVECVE-2026-76282: Improper Control of a Resource Through its Lifetime in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76282/https://agentprime.io/advisories/CVE-2026-76282/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:38 GMTCVECVE-2026-76281: Improper Access Control in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76281/https://agentprime.io/advisories/CVE-2026-76281/Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:37 GMTCVECVE-2026-76280: Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gatewayhttps://agentprime.io/advisories/CVE-2026-76280/https://agentprime.io/advisories/CVE-2026-76280/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:37 GMTCVECVE-2026-76279: Improper Input Validation of Index Names through the collect Command in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76279/https://agentprime.io/advisories/CVE-2026-76279/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:36 GMTCVECVE-2026-76278: Authorization Bypass in SPL2 Module Permissions in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76278/https://agentprime.io/advisories/CVE-2026-76278/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:36 GMTCVECVE-2026-76277: Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76277/https://agentprime.io/advisories/CVE-2026-76277/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:35 GMTCVECVE-2026-76276: Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76276/https://agentprime.io/advisories/CVE-2026-76276/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:35 GMTCVECVE-2026-76275: Improper Authorization in Search Job Listings through the REST API in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76275/https://agentprime.io/advisories/CVE-2026-76275/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:34 GMTCVECVE-2026-76274: Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloudhttps://agentprime.io/advisories/CVE-2026-76274/https://agentprime.io/advisories/CVE-2026-76274/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:34 GMTCVECVE-2026-76273: Improper Input Validation through the collect Command in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76273/https://agentprime.io/advisories/CVE-2026-76273/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:33 GMTCVECVE-2026-76272: Missing Access Control through the REST API in Splunk Secure Gatewayhttps://agentprime.io/advisories/CVE-2026-76272/https://agentprime.io/advisories/CVE-2026-76272/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:33 GMTCVECVE-2026-76271: Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76271/https://agentprime.io/advisories/CVE-2026-76271/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:32 GMTCVECVE-2026-76270: Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76270/https://agentprime.io/advisories/CVE-2026-76270/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:32 GMTCVECVE-2026-76269: Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76269/https://agentprime.io/advisories/CVE-2026-76269/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:31 GMTCVECVE-2026-76268: Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76268/https://agentprime.io/advisories/CVE-2026-76268/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:31 GMTCVEcriticalCVE-2026-76267: Log Injection through the REST API in Splunk App for Splunk O11y Cloudhttps://agentprime.io/advisories/CVE-2026-76267/https://agentprime.io/advisories/CVE-2026-76267/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:30 GMTCVECVE-2026-76266: Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76266/https://agentprime.io/advisories/CVE-2026-76266/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:29 GMTCVECVE-2026-76265: Improper Access Control through REST API Endpoints in Splunk Secure Gatewayhttps://agentprime.io/advisories/CVE-2026-76265/https://agentprime.io/advisories/CVE-2026-76265/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:29 GMTCVECVE-2026-76264: Improper Authorization through the REST API in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76264/https://agentprime.io/advisories/CVE-2026-76264/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:46:28 GMTCVECVE-2026-76355: Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76355/https://agentprime.io/advisories/CVE-2026-76355/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:47 GMTCVECVE-2026-76354: Path Traversal through Search Head Clustering in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76354/https://agentprime.io/advisories/CVE-2026-76354/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:47 GMTCVECVE-2026-76353: Path Traversal through Knowledge Bundle Replication in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76353/https://agentprime.io/advisories/CVE-2026-76353/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:46 GMTCVECVE-2026-76352: Improper Authorization through the REST API in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76352/https://agentprime.io/advisories/CVE-2026-76352/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:46 GMTCVECVE-2026-76351: Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gatewayhttps://agentprime.io/advisories/CVE-2026-76351/https://agentprime.io/advisories/CVE-2026-76351/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:45 GMTCVECVE-2026-76350: Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76350/https://agentprime.io/advisories/CVE-2026-76350/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:44 GMTCVECVE-2026-76349: SPL Injection through Splunk Web Form Tokens in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76349/https://agentprime.io/advisories/CVE-2026-76349/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:44 GMTCVECVE-2026-76348: Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76348/https://agentprime.io/advisories/CVE-2026-76348/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:43 GMTCVECVE-2026-76347: Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gatewayhttps://agentprime.io/advisories/CVE-2026-76347/https://agentprime.io/advisories/CVE-2026-76347/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:43 GMTCVECVE-2026-76346: Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76346/https://agentprime.io/advisories/CVE-2026-76346/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:42 GMTCVECVE-2026-76345: Remote Code Execution (RCE) through the REST API in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76345/https://agentprime.io/advisories/CVE-2026-76345/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:41 GMTCVECVE-2026-76344: Path Traversal through the Search Dispatch REST API in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-76344/https://agentprime.io/advisories/CVE-2026-76344/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:41 GMTCVE