https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T02:40:21.256573+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-08555 bdu:2026-08555 2026-10-05T02:40:21.259998+00:00 bdu:2026-08555 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0774 certfr-2026-avi-0774 — De multiples vulnérabilités ont été découvertes dans Splunk AI Toolkit. Elles permettent à un attaquant de provoquer un… 2026-10-05T02:40:21.260033+00:00 certfr-2026-avi-0774 https://cve.radiocsirt.org/vuln/euvd-2026-328292 EUVD-2026-328292 2026-10-05T02:40:21.260052+00:00 EUVD-2026-328292 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20265 fkie_cve-2026-20265 2026-10-05T02:40:21.260065+00:00

In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration.

The vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains.

 https://cve.radiocsirt.org/vuln/ghsa-6q6w-qw52-9q3j GHSA-6q6w-qw52-9q3j 2026-10-05T02:40:21.260098+00:00

In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause the Splunk AI Toolkit to make outbound requests over HTTP to a server that an attacker controls, which could allow for data exfiltration.

The vulnerability exists because of an insecure default domain allowlist in the Splunk AI Toolkit, which does not restrict outbound AI agent requests to approved external domains.