https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:50:33.506365+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-22940 CVE-2023-22940 — SPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk Enterprise 2026-10-06T08:50:33.526711+00:00

Affected: Splunk Enterprise, Splunk Cloud Platform

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the ‘collect’ search processing language (SPL) command, including ‘summaryindex’, ‘sumindex’, ‘stash’,’ mcollect’, and ‘meventcollect’, were not designated as safeguarded commands. The commands could potentially allow for the exposing of data to a summary index that unprivileged users could access. The vulnerability requires a higher privileged user to initiate a request within their browser, and only affects instances with Splunk Web enabled.