<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: splunk-secure-gateway</title><description>Every new CVE for splunk-secure-gateway.</description><link>https://agentprime.io/</link><item><title>CVE-2026-76295: SPL Injection through the REST API in Splunk Secure Gateway</title><link>https://agentprime.io/advisories/CVE-2026-76295/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76295/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Oct 2026 22:51:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76292: Missing Authorization through REST API Endpoints in Splunk Secure Gateway</title><link>https://agentprime.io/advisories/CVE-2026-76292/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76292/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Oct 2026 22:51:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76280: Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway</title><link>https://agentprime.io/advisories/CVE-2026-76280/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76280/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Oct 2026 20:46:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76272: Missing Access Control through the REST API in Splunk Secure Gateway</title><link>https://agentprime.io/advisories/CVE-2026-76272/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76272/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Oct 2026 20:46:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76265: Improper Access Control through REST API Endpoints in Splunk Secure Gateway</title><link>https://agentprime.io/advisories/CVE-2026-76265/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76265/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Oct 2026 20:46:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76351: Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway</title><link>https://agentprime.io/advisories/CVE-2026-76351/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76351/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 21:34:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76347: Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway</title><link>https://agentprime.io/advisories/CVE-2026-76347/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76347/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 21:34:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76327: SPL Injection through Splunk Web in Splunk Secure Gateway</title><link>https://agentprime.io/advisories/CVE-2026-76327/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76327/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 21:34:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76261: Insecure Default Access Control List through the REST API in Splunk Secure Gateway</title><link>https://agentprime.io/advisories/CVE-2026-76261/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76261/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 21:34:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76258: Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway</title><link>https://agentprime.io/advisories/CVE-2026-76258/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76258/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 21:34:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76257: Missing Authorization through REST API Endpoints in Splunk Secure Gateway</title><link>https://agentprime.io/advisories/CVE-2026-76257/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76257/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 21:34:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76256: Information Exposure through REST API Endpoints in Splunk Secure Gateway</title><link>https://agentprime.io/advisories/CVE-2026-76256/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76256/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 21:34:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-20251: Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway</title><link>https://agentprime.io/advisories/CVE-2026-20251/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-20251/</guid><description>CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.32 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Jun 2026 17:16:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-20389: Improper Input Validation in &quot;label&quot; column field in Splunk Secure Gateway App</title><link>https://agentprime.io/advisories/CVE-2025-20389/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-20389/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 Dec 2025 17:00:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-20383: Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app</title><link>https://agentprime.io/advisories/CVE-2025-20383/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-20383/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 Dec 2025 17:00:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-20230: Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App</title><link>https://agentprime.io/advisories/CVE-2025-20230/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-20230/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Mar 2025 22:24:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-20231: Sensitive Information Disclosure in Splunk Secure Gateway App</title><link>https://agentprime.io/advisories/CVE-2025-20231/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-20231/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Mar 2025 21:45:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-53243: Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway</title><link>https://agentprime.io/advisories/CVE-2024-53243/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-53243/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Dec 2024 18:00:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-53247: Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app</title><link>https://agentprime.io/advisories/CVE-2024-53247/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-53247/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Dec 2024 18:00:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-45735: Improper Access Control for low-privileged user in Splunk Secure Gateway App</title><link>https://agentprime.io/advisories/CVE-2024-45735/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-45735/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Oct 2024 16:45:54 GMT</pubDate><category>CVE</category></item></channel></rss>