https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:53:04 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0736 certfr-2026-avi-0736 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0736 https://cve.radiocsirt.org/vuln/euvd-2026-326552 EUVD-2026-326552 https://cve.radiocsirt.org/vuln/euvd-2026-326552 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20251 <p>In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway versions below 3.10.6, 3.9.20, and 3.8.67, a low-privileged user that does not hold the &#39;admin&#39; or &#39;power&#39; Splunk roles could perform a Remote Code Execution (RCE) through the Splunk Secure Gateway app.&lt;br&gt;&lt;br&gt;The Remote Code Execution is possible because of unsafe deserialization of App Key Value Store (KV Store) data through the ‘jsonpickle’ Python library, which reconstructs arbitrary Python objects from specially crafted JavaScript Object Notation (JSON) without adequate validation.</p> <p>In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway versions below 3.10.6, 3.9.20, and 3.8.67, a low-privileged user that does not hold the &#39;admin&#39; or &#39;power&#39; Splunk roles could perform a Remote Code Execution (RCE) through the Splunk Secure Gateway app.&lt;br&gt;&lt;br&gt;The Remote Code Execution is possible because of unsafe deserialization of App Key Value Store (KV Store) data through the ‘jsonpickle’ Python library, which reconstructs arbitrary Python objects from specially crafted JavaScript Object Notation (JSON) without adequate validation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-20251 https://cve.radiocsirt.org/vuln/ghsa-3crw-7xg9-fpxg <p>In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway versions below 3.10.6, 3.9.20, and 3.8.67, a low-privileged user that does not hold the &#39;admin&#39; or &#39;power&#39; Splunk roles could perform a Remote Code Execution (RCE) through the Splunk Secure Gateway app.&lt;br&gt;&lt;br&gt;The Remote Code Execution is possible because of unsafe deserialization of App Key Value Store (KV Store) data through the ‘jsonpickle’ Python library, which reconstructs arbitrary Python objects from specially crafted JavaScript Object Notation (JSON) without adequate validation.</p> <p>In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway versions below 3.10.6, 3.9.20, and 3.8.67, a low-privileged user that does not hold the &#39;admin&#39; or &#39;power&#39; Splunk roles could perform a Remote Code Execution (RCE) through the Splunk Secure Gateway app.&lt;br&gt;&lt;br&gt;The Remote Code Execution is possible because of unsafe deserialization of App Key Value Store (KV Store) data through the ‘jsonpickle’ Python library, which reconstructs arbitrary Python objects from specially crafted JavaScript Object Notation (JSON) without adequate validation.</p> https://cve.radiocsirt.org/vuln/ghsa-3crw-7xg9-fpxg https://cve.radiocsirt.org/vuln/ncsc-2026-0198 NCSC-2026-0198 https://cve.radiocsirt.org/vuln/ncsc-2026-0198 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1877 <p>Ein Angreifer kann mehrere Schwachstellen in Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1877