https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:34:23.963800+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-16295 bdu:2025-16295 2026-10-05T20:34:23.967463+00:00 bdu:2025-16295 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1063 certfr-2025-avi-1063 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaq… 2026-10-05T20:34:23.967495+00:00 certfr-2025-avi-1063 https://cve.radiocsirt.org/vuln/euvd-2026-262508 EUVD-2026-262508 2026-10-05T20:34:23.967513+00:00 EUVD-2026-262508 https://cve.radiocsirt.org/vuln/fkie_cve-2025-20384 fkie_cve-2025-20384 2026-10-05T20:34:23.967525+00:00

In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Standards Institute (ANSI) escape codes into Splunk log files due to improper validation at the /en-US/static/ web endpoint. This may allow them to poison, forge, or obfuscate sensitive log data through specially crafted HTTP requests, potentially impacting log integrity and detection capabilities.

 https://cve.radiocsirt.org/vuln/ghsa-2x78-c45h-phqx GHSA-2x78-c45h-phqx 2026-10-05T20:34:23.967551+00:00

In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Standards Institute (ANSI) escape codes into Splunk log files due to improper validation at the /en-US/static/ web endpoint. This may allow them to poison, forge, or obfuscate sensitive log data through specially crafted HTTP requests, potentially impacting log integrity and detection capabilities.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2735 WID-SEC-W-2025-2735 — Splunk Enterprise: Mehrere Schwachstellen 2026-10-05T20:34:23.967567+00:00

Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.