https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:59:48.878028+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-20298 CVE-2025-20298 — Incorrect permission assignment on Universal Forwarder for Windows during new installation or upgrade 2026-10-07T14:59:48.880641+00:00

Affected: Splunk/UniversalForwarder for Windows

In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory (by default, C:\Program Files\SplunkUniversalForwarder). This lets non-administrator users on the machine access the directory and all its contents.