https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:59:33.914755+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1056 certfr-2026-avi-1056 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaq… 2026-10-03T18:59:33.964934+00:00 certfr-2026-avi-1056 https://cve.radiocsirt.org/vuln/euvd-2026-357172 EUVD-2026-357172 2026-10-03T18:59:33.964974+00:00 EUVD-2026-357172 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76350 fkie_cve-2026-76350 2026-10-03T18:59:33.964990+00:00

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could configure Portable Document Format (PDF) attachments in the email alert action workflow. When the email alert action runs, it could execute arbitrary Search Processing Language (SPL) commands with system-level privileges, expose all relevant data, and affect system integrity and availability on the search head. The vulnerability is possible because the search scheduler passes a system-level authentication context rather than the action owner context to the email alert action when it renders PDF attachments. For more information see alert_actions.conf (https://help.splunk.com/en/splunk-enterprise/administer/admin-manual/10.4/configuration-file-reference/10.4.0-configuration-file-reference/alert_actions.conf) in the Splunk documentation.

 https://cve.radiocsirt.org/vuln/ghsa-xjhr-xq5w-qrwr GHSA-xjhr-xq5w-qrwr 2026-10-03T18:59:33.965023+00:00

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could configure Portable Document Format (PDF) attachments in the email alert action workflow. When the email alert action runs, it could execute arbitrary Search Processing Language (SPL) commands with system-level privileges, expose all relevant data, and affect system integrity and availability on the search head. The vulnerability is possible because the search scheduler passes a system-level authentication context rather than the action owner context to the email alert action when it renders PDF attachments. For more information see alert_actions.conf (https://help.splunk.com/en/splunk-enterprise/administer/admin-manual/10.4/configuration-file-reference/10.4.0-configuration-file-reference/alert_actions.conf) in the Splunk documentation.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0322 NCSC-2026-0322 — Kwetsbaarheden verholpen in Splunk Enterprise door Splunk 2026-10-03T18:59:33.965043+00:00 NCSC-2026-0322 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2929 WID-SEC-W-2026-2929 — Splunk Splunk Enterprise: Mehrere Schwachstellen 2026-10-03T18:59:33.965086+00:00

Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, SQL-Injection-, serverseitige Request-Forgery- und Cross-Site-Scripting-Angriffe durchzuführen, sensible Informationen offenzulegen oder zu manipulieren, Denial-of-Service-Zustände auszulösen oder andere, nicht näher spezifizierte Angriffe durchzuführen.