<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 07 Oct 2026 21:28:11 +0000</lastBuildDate>
    <item>
      <title>certfr-2022-avi-418 — De multiples vulnérabilités ont été découvertes dans Splunk Enterprise.
Certaines d'entre elles permettent à un attaqua…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2022-avi-418</link>
      <description>certfr-2022-avi-418</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2022-avi-418</guid>
    </item>
    <item>
      <title>EUVD-2026-15076</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-15076</link>
      <description>EUVD-2026-15076</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-15076</guid>
    </item>
    <item>
      <title>fkie_cve-2022-26889</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2022-26889</link>
      <description>&lt;p&gt;In Splunk Enterprise versions before 8.1.2, the uri path to load a relative resource within a web page is vulnerable to path traversal. It allows an attacker to potentially inject arbitrary content into the web page (e.g., HTML Injection, XSS) or bypass SPL safeguards for risky commands. The attack is browser-based. An attacker cannot exploit the attack at will and requires the attacker to initiate a request within the victim&amp;#39;s browser (e.g., phishing).&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;In Splunk Enterprise versions before 8.1.2, the uri path to load a relative resource within a web page is vulnerable to path traversal. It allows an attacker to potentially inject arbitrary content into the web page (e.g., HTML Injection, XSS) or bypass SPL safeguards for risky commands. The attack is browser-based. An attacker cannot exploit the attack at will and requires the attacker to initiate a request within the victim&amp;#39;s browser (e.g., phishing).&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2022-26889</guid>
    </item>
    <item>
      <title>GHSA-79w5-m8hm-g24m</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-79w5-m8hm-g24m</link>
      <description>&lt;p&gt;The lack of sanitization in a relative url path in a search parameter allows for arbitrary injection of external content in Splunk Enterprise versions before 8.1.2.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;The lack of sanitization in a relative url path in a search parameter allows for arbitrary injection of external content in Splunk Enterprise versions before 8.1.2.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-79w5-m8hm-g24m</guid>
    </item>
    <item>
      <title>gsd-2022-26889</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2022-26889</link>
      <description>gsd-2022-26889</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2022-26889</guid>
    </item>
  </channel>
</rss>
