https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T02:39:05.126214+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0142 certfr-2023-avi-0142 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Splunk</span>. Elles permettent à un attaquant… 2026-10-05T02:39:05.199020+00:00 certfr-2023-avi-0142 https://cve.radiocsirt.org/vuln/euvd-2026-219832 EUVD-2026-219832 2026-10-05T02:39:05.199072+00:00 EUVD-2026-219832 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22940 fkie_cve-2023-22940 2026-10-05T02:39:05.199094+00:00

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the ‘collect’ search processing language (SPL) command, including ‘summaryindex’, ‘sumindex’, ‘stash’,’ mcollect’, and ‘meventcollect’, were not designated as safeguarded commands. The commands could potentially allow for the exposing of data to a summary index that unprivileged users could access. The vulnerability requires a higher privileged user to initiate a request within their browser, and only affects instances with Splunk Web enabled.

 https://cve.radiocsirt.org/vuln/ghsa-h6fv-f2m3-r3mm GHSA-h6fv-f2m3-r3mm 2026-10-05T02:39:05.199147+00:00

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the ‘collect’ search processing language (SPL) command, including ‘summaryindex’, ‘sumindex’, ‘stash’,’ mcollect’, and ‘meventcollect’, were not designated as safeguarded commands. The commands could potentially allow for the exposing of data to a summary index that unprivileged users could access. The vulnerability requires a higher privileged user to initiate a request within their browser, and only affects instances with Splunk Web enabled.

 https://cve.radiocsirt.org/vuln/gsd-2023-22940 gsd-2023-22940 2026-10-05T02:39:05.199183+00:00 gsd-2023-22940 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0395 WID-SEC-W-2023-0395 — Splunk Splunk Enterprise: Mehrere Schwachstellen 2026-10-05T02:39:05.199202+00:00

Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.