https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:48:55.122128+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0142 certfr-2023-avi-0142 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Splunk</span>. Elles permettent à un attaquant… 2026-10-04T12:48:55.126541+00:00 certfr-2023-avi-0142 https://cve.radiocsirt.org/vuln/euvd-2026-219841 EUVD-2026-219841 2026-10-04T12:48:55.126585+00:00 EUVD-2026-219841 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22943 fkie_cve-2023-22943 2026-10-04T12:48:55.126600+00:00

In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.

 https://cve.radiocsirt.org/vuln/ghsa-jjqg-fqrm-g2vj GHSA-jjqg-fqrm-g2vj 2026-10-04T12:48:55.126631+00:00

In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs. The vulnerability affects AoB and apps that AoB generates when using the REST API Modular Input functionality through its user interface. The vulnerability also potentially affects third-party apps and add-ons that call the *cloudconnectlib.splunktacollectorlib.cloud_connect_mod_input* Python class directly.

 https://cve.radiocsirt.org/vuln/gsd-2023-22943 gsd-2023-22943 2026-10-04T12:48:55.126650+00:00 gsd-2023-22943 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0395 WID-SEC-W-2023-0395 — Splunk Splunk Enterprise: Mehrere Schwachstellen 2026-10-04T12:48:55.126661+00:00

Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.