cvelistv5 - cve-2026-76349

CVE-2026-76349 (GCVE-0-2026-76349)

Vulnerability from cvelistv5

Published

2026-08-19 21:34

Modified

2026-08-20 16:27

Severity ?

6.4 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L

CWE

CWE-943 - The application generates a query intended to access or manipulate data in a data store such as a database, but it does not neutralize or incorrectly neutralizes special elements that can modify the intended logic of the query.

Summary

In Splunk Enterprise versions below 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated user into running arbitrary Search Processing Language (SPL) commands using the permissions of the authenticated user through a crafted Splunk Web link. The SPL commands could access all relevant data. The vulnerability does not affect Splunk Enterprise 10.4 versions and above. The vulnerability is possible because Splunk Web substitutes form token values supplied through the Uniform Resource Locator (URL) into SPL searches without neutralizing them. The vulnerability requires the attacker to phish the user by tricking them into opening the crafted link. The unauthenticated user should not be able to exploit the vulnerability at will. For more information see Token reference (https://help.splunk.com/en/splunk-enterprise/create-dashboards-and-reports/simple-xml-dashboards/10.2/simple-xml-reference/token-reference) in the Splunk documentation.

References

URL

	Vendor	Product	Version
	Splunk	Splunk Enterprise	Version: 10.2 < 10.2.6 Version: 10.0 < 10.0.9 Version: 9.4 < 9.4.14

CERTFR-2026-AVI-1056

Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Splunk	N/A	MS Graph pour Active Directory app pour Splunk SOAR versions antérieures à 1.5.2
Splunk	N/A	Venafi app pour Splunk SOAR versions antérieures à 2.1.4
Splunk	Universal Forwarder	Splunk Universal Forwarder versions 10.0.x antérieures à 10.0.9
Splunk	N/A	AWS IAM app pour Splunk SOAR versions antérieures à 2.1.9
Splunk	N/A	Azure AD Graph app pour Splunk SOAR versions antérieures à 2.5.3
Splunk	SOAR	Splunk SOAR versions antérieures à 8.6.0
Splunk	Splunk	Splunk Connect pour Kafka versions antérieures à 2.2.7
Splunk	Splunk Enterprise	Splunk Enterprise versions 9.4.x antérieures à 9.4.14
Splunk	N/A	FireAMP versions 2.1.x antérieures à 2.1.15
Splunk	N/A	Zoom app pour Splunk SOAR versions antérieures à 3.2.2
Splunk	N/A	Phantom app pour Splunk SOAR versions antérieures à 3.8.5
Splunk	Splunk	Splunk On-Call (VictorOps) versions antérieures à 1.0.43
Splunk	Splunk	Splunk Attack Analyzer Connector pour Splunk SOAR versions 2.2.x antérieures à 2.2.1
Splunk	Splunk	Splunk MCP Server app versions antérieures à 1.2.1
Splunk	Splunk Enterprise	Splunk Enterprise versions 10.4.x antérieures à 10.4.2
Splunk	N/A	AD LDAP app pour Splunk SOAR versions antérieures à 2.3.8
Splunk	Splunk Enterprise	Splunk Enterprise versions 10.2.x antérieures à 10.2.6
Splunk	Universal Forwarder	Splunk Universal Forwarder versions 9.4.x antérieures à 9.4.14
Splunk	Splunk AI Toolkit	Splunk AI Toolkit versions antérieures à 6.0.1
Splunk	Universal Forwarder	Splunk Universal Forwarder versions 10.2.x antérieures à 10.2.6
Splunk	N/A	Cisco Talos Intelligence pour Enterprise Security Cloud versions antérieures à 1.0.3
Splunk	Splunk Enterprise	Splunk Enterprise versions 10.0.x antérieures à 10.0.9
Splunk	N/A	CrowdStrike OAuth API app pour Splunk SOAR versions antérieures à 5.1.3
Splunk	Enterprise Security	Splunk Enterprise Security versions antérieures à 8.6.1
Splunk	N/A	Nmap Scanner versions 3.0.x antérieures à 3.0.15
Splunk	N/A	RSA SecurID Authentication Manager app pour Splunk SOAR versions antérieures à 1.0.5
Splunk	N/A	Cisco Secure Malware Analytics app pour Splunk SOAR versions antérieures à 2.4.5
Splunk	N/A	Cisco Webex app pour Splunk SOAR versions antérieures à 2.2.1
Splunk	Universal Forwarder	Splunk Universal Forwarder versions 10.4.x antérieures à 10.4.2

References

Title

Publication Time

Tags

Bulletin de sécurité Splunk SVD-2026-0807	2026-08-19	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0805	2026-08-19	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0803	2026-08-19	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0802	2026-08-19	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0801	2026-08-19	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0808	2026-08-19	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0806	2026-08-19	vendor-advisory
Bulletin de sécurité Splunk SVD-2026-0804	2026-08-19	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "MS Graph pour Active Directory app pour Splunk SOAR versions ant\u00e9rieures \u00e0 1.5.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Venafi app pour Splunk SOAR versions ant\u00e9rieures \u00e0 2.1.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Universal Forwarder versions 10.0.x ant\u00e9rieures \u00e0 10.0.9",
      "product": {
        "name": "Universal Forwarder",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "AWS IAM app pour Splunk SOAR versions ant\u00e9rieures \u00e0 2.1.9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Azure AD Graph app pour Splunk SOAR versions ant\u00e9rieures \u00e0 2.5.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk SOAR versions ant\u00e9rieures \u00e0 8.6.0",
      "product": {
        "name": "SOAR",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Connect pour Kafka versions ant\u00e9rieures \u00e0 2.2.7",
      "product": {
        "name": "Splunk",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Enterprise versions 9.4.x ant\u00e9rieures \u00e0 9.4.14",
      "product": {
        "name": "Splunk Enterprise",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "FireAMP versions 2.1.x ant\u00e9rieures \u00e0 2.1.15",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Zoom app pour Splunk SOAR versions ant\u00e9rieures \u00e0 3.2.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Phantom app pour Splunk SOAR versions ant\u00e9rieures \u00e0 3.8.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk On-Call (VictorOps) versions ant\u00e9rieures \u00e0 1.0.43",
      "product": {
        "name": "Splunk",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Attack Analyzer Connector pour Splunk SOAR versions 2.2.x ant\u00e9rieures \u00e0 2.2.1",
      "product": {
        "name": "Splunk",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk MCP Server app versions ant\u00e9rieures \u00e0 1.2.1",
      "product": {
        "name": "Splunk",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Enterprise versions 10.4.x ant\u00e9rieures \u00e0 10.4.2",
      "product": {
        "name": "Splunk Enterprise",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "AD LDAP app pour Splunk SOAR versions ant\u00e9rieures \u00e0 2.3.8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Enterprise versions 10.2.x ant\u00e9rieures \u00e0 10.2.6",
      "product": {
        "name": "Splunk Enterprise",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Universal Forwarder versions 9.4.x ant\u00e9rieures \u00e0 9.4.14",
      "product": {
        "name": "Universal Forwarder",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk AI Toolkit versions ant\u00e9rieures \u00e0 6.0.1",
      "product": {
        "name": "Splunk AI Toolkit",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Universal Forwarder versions 10.2.x ant\u00e9rieures \u00e0 10.2.6",
      "product": {
        "name": "Universal Forwarder",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco Talos Intelligence pour Enterprise Security Cloud versions ant\u00e9rieures \u00e0 1.0.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Enterprise versions 10.0.x ant\u00e9rieures \u00e0 10.0.9",
      "product": {
        "name": "Splunk Enterprise",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "CrowdStrike OAuth API app pour Splunk SOAR versions ant\u00e9rieures \u00e0 5.1.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Enterprise Security versions ant\u00e9rieures \u00e0 8.6.1",
      "product": {
        "name": "Enterprise Security",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Nmap Scanner versions 3.0.x ant\u00e9rieures \u00e0 3.0.15",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "RSA SecurID Authentication Manager app pour Splunk SOAR versions ant\u00e9rieures \u00e0 1.0.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco Secure Malware Analytics app pour Splunk SOAR versions ant\u00e9rieures \u00e0 2.4.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco Webex app pour Splunk SOAR versions ant\u00e9rieures \u00e0 2.2.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    },
    {
      "description": "Splunk Universal Forwarder versions 10.4.x ant\u00e9rieures \u00e0 10.4.2",
      "product": {
        "name": "Universal Forwarder",
        "vendor": {
          "name": "Splunk",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-26007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26007"
    },
    {
      "name": "CVE-2025-13473",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13473"
    },
    {
      "name": "CVE-2026-76349",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76349"
    },
    {
      "name": "CVE-2026-32597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32597"
    },
    {
      "name": "CVE-2026-31958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31958"
    },
    {
      "name": "CVE-2026-76329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76329"
    },
    {
      "name": "CVE-2026-6474",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6474"
    },
    {
      "name": "CVE-2026-40087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40087"
    },
    {
      "name": "CVE-2026-6472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6472"
    },
    {
      "name": "CVE-2026-34180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34180"
    },
    {
      "name": "CVE-2026-76345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76345"
    },
    {
      "name": "CVE-2025-67726",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-67726"
    },
    {
      "name": "CVE-2026-76394",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76394"
    },
    {
      "name": "CVE-2026-76383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76383"
    },
    {
      "name": "CVE-2026-33186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
    },
    {
      "name": "CVE-2026-76401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76401"
    },
    {
      "name": "CVE-2026-42766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42766"
    },
    {
      "name": "CVE-2026-76257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76257"
    },
    {
      "name": "CVE-2026-32647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32647"
    },
    {
      "name": "CVE-2026-76324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76324"
    },
    {
      "name": "CVE-2026-9076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9076"
    },
    {
      "name": "CVE-2026-76335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76335"
    },
    {
      "name": "CVE-2026-76360",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76360"
    },
    {
      "name": "CVE-2026-76393",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76393"
    },
    {
      "name": "CVE-2026-76331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76331"
    },
    {
      "name": "CVE-2026-76356",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76356"
    },
    {
      "name": "CVE-2026-6479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6479"
    },
    {
      "name": "CVE-2026-76262",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76262"
    },
    {
      "name": "CVE-2026-1642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1642"
    },
    {
      "name": "CVE-2026-27651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27651"
    },
    {
      "name": "CVE-2026-27654",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27654"
    },
    {
      "name": "CVE-2026-76358",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76358"
    },
    {
      "name": "CVE-2026-1285",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1285"
    },
    {
      "name": "CVE-2026-76320",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76320"
    },
    {
      "name": "CVE-2026-27959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27959"
    },
    {
      "name": "CVE-2026-76342",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76342"
    },
    {
      "name": "CVE-2026-6429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6429"
    },
    {
      "name": "CVE-2026-40701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40701"
    },
    {
      "name": "CVE-2026-76402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76402"
    },
    {
      "name": "CVE-2026-2391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2391"
    },
    {
      "name": "CVE-2026-76395",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76395"
    },
    {
      "name": "CVE-2026-24737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24737"
    },
    {
      "name": "CVE-2026-27143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27143"
    },
    {
      "name": "CVE-2026-76369",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76369"
    },
    {
      "name": "CVE-2026-76386",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76386"
    },
    {
      "name": "CVE-2026-76344",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76344"
    },
    {
      "name": "CVE-2026-2006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2006"
    },
    {
      "name": "CVE-2026-42946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42946"
    },
    {
      "name": "CVE-2026-6637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6637"
    },
    {
      "name": "CVE-2026-21226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21226"
    },
    {
      "name": "CVE-2024-35255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35255"
    },
    {
      "name": "CVE-2026-76312",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76312"
    },
    {
      "name": "CVE-2026-35536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35536"
    },
    {
      "name": "CVE-2026-76403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76403"
    },
    {
      "name": "CVE-2026-28755",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28755"
    },
    {
      "name": "CVE-2026-6473",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6473"
    },
    {
      "name": "CVE-2026-76371",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76371"
    },
    {
      "name": "CVE-2026-76313",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76313"
    },
    {
      "name": "CVE-2026-42215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42215"
    },
    {
      "name": "CVE-2026-2005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2005"
    },
    {
      "name": "CVE-2026-76327",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76327"
    },
    {
      "name": "CVE-2026-76381",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76381"
    },
    {
      "name": "CVE-2026-7383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7383"
    },
    {
      "name": "CVE-2026-25674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25674"
    },
    {
      "name": "CVE-2026-27144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27144"
    },
    {
      "name": "CVE-2026-76385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76385"
    },
    {
      "name": "CVE-2026-32283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
    },
    {
      "name": "CVE-2026-76364",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76364"
    },
    {
      "name": "CVE-2026-76388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76388"
    },
    {
      "name": "CVE-2026-42934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42934"
    },
    {
      "name": "CVE-2026-24043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24043"
    },
    {
      "name": "CVE-2026-76261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76261"
    },
    {
      "name": "CVE-2026-45409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45409"
    },
    {
      "name": "CVE-2025-53859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-53859"
    },
    {
      "name": "CVE-2026-76378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76378"
    },
    {
      "name": "CVE-2026-21860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21860"
    },
    {
      "name": "CVE-2026-4800",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
    },
    {
      "name": "CVE-2026-76354",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76354"
    },
    {
      "name": "CVE-2026-76377",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76377"
    },
    {
      "name": "CVE-2026-39883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39883"
    },
    {
      "name": "CVE-2026-76321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76321"
    },
    {
      "name": "CVE-2026-0540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0540"
    },
    {
      "name": "CVE-2026-32281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
    },
    {
      "name": "CVE-2025-6545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6545"
    },
    {
      "name": "CVE-2026-76390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76390"
    },
    {
      "name": "CVE-2026-28389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28389"
    },
    {
      "name": "CVE-2026-76255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76255"
    },
    {
      "name": "CVE-2026-33671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33671"
    },
    {
      "name": "CVE-2026-34515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34515"
    },
    {
      "name": "CVE-2026-33532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33532"
    },
    {
      "name": "CVE-2026-76380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76380"
    },
    {
      "name": "CVE-2026-34519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34519"
    },
    {
      "name": "CVE-2026-76404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76404"
    },
    {
      "name": "CVE-2026-76343",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76343"
    },
    {
      "name": "CVE-2026-76254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76254"
    },
    {
      "name": "CVE-2026-30922",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
    },
    {
      "name": "CVE-2026-76397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76397"
    },
    {
      "name": "CVE-2026-76337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76337"
    },
    {
      "name": "CVE-2026-76326",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76326"
    },
    {
      "name": "CVE-2026-33750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33750"
    },
    {
      "name": "CVE-2026-76328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76328"
    },
    {
      "name": "CVE-2026-76359",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76359"
    },
    {
      "name": "CVE-2026-76365",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76365"
    },
    {
      "name": "CVE-2026-1207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1207"
    },
    {
      "name": "CVE-2026-34986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
    },
    {
      "name": "CVE-2026-33228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33228"
    },
    {
      "name": "CVE-2026-76405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76405"
    },
    {
      "name": "CVE-2026-76253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76253"
    },
    {
      "name": "CVE-2026-76314",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76314"
    },
    {
      "name": "CVE-2026-76315",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76315"
    },
    {
      "name": "CVE-2026-6638",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6638"
    },
    {
      "name": "CVE-2026-76347",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76347"
    },
    {
      "name": "CVE-2026-34518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34518"
    },
    {
      "name": "CVE-2026-76382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76382"
    },
    {
      "name": "CVE-2026-76332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76332"
    },
    {
      "name": "CVE-2026-76379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76379"
    },
    {
      "name": "CVE-2026-76376",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76376"
    },
    {
      "name": "CVE-2026-76252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76252"
    },
    {
      "name": "CVE-2026-27199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27199"
    },
    {
      "name": "CVE-2026-76336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76336"
    },
    {
      "name": "CVE-2026-76391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76391"
    },
    {
      "name": "CVE-2026-22702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22702"
    },
    {
      "name": "CVE-2026-45447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
    },
    {
      "name": "CVE-2026-25679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
    },
    {
      "name": "CVE-2025-14017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14017"
    },
    {
      "name": "CVE-2026-76384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76384"
    },
    {
      "name": "CVE-2026-34525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34525"
    },
    {
      "name": "CVE-2026-76351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76351"
    },
    {
      "name": "CVE-2026-76256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76256"
    },
    {
      "name": "CVE-2026-28388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28388"
    },
    {
      "name": "CVE-2026-76309",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76309"
    },
    {
      "name": "CVE-2026-6478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6478"
    },
    {
      "name": "CVE-2026-34601",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34601"
    },
    {
      "name": "CVE-2026-24133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24133"
    },
    {
      "name": "CVE-2026-1312",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1312"
    },
    {
      "name": "CVE-2026-76367",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76367"
    },
    {
      "name": "CVE-2025-14550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14550"
    },
    {
      "name": "CVE-2025-66221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66221"
    },
    {
      "name": "CVE-2026-76322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76322"
    },
    {
      "name": "CVE-2026-76319",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76319"
    },
    {
      "name": "CVE-2026-76318",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76318"
    },
    {
      "name": "CVE-2026-2950",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2950"
    },
    {
      "name": "CVE-2026-76258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76258"
    },
    {
      "name": "CVE-2026-42284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42284"
    },
    {
      "name": "CVE-2026-6475",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6475"
    },
    {
      "name": "CVE-2026-76370",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76370"
    },
    {
      "name": "CVE-2026-76363",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76363"
    },
    {
      "name": "CVE-2026-32280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
    },
    {
      "name": "CVE-2026-76361",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76361"
    },
    {
      "name": "CVE-2026-76316",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76316"
    },
    {
      "name": "CVE-2026-76330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76330"
    },
    {
      "name": "CVE-2026-76260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76260"
    },
    {
      "name": "CVE-2025-69873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
    },
    {
      "name": "CVE-2026-44244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44244"
    },
    {
      "name": "CVE-2026-25940",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25940"
    },
    {
      "name": "CVE-2026-24040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24040"
    },
    {
      "name": "CVE-2026-76346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76346"
    },
    {
      "name": "CVE-2026-76373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76373"
    },
    {
      "name": "CVE-2026-76400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76400"
    },
    {
      "name": "CVE-2026-76372",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76372"
    },
    {
      "name": "CVE-2026-29181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-29181"
    },
    {
      "name": "CVE-2026-25755",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25755"
    },
    {
      "name": "CVE-2026-76334",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76334"
    },
    {
      "name": "CVE-2025-15599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15599"
    },
    {
      "name": "CVE-2026-28390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28390"
    },
    {
      "name": "CVE-2026-6477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6477"
    },
    {
      "name": "CVE-2026-76340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76340"
    },
    {
      "name": "CVE-2026-76341",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76341"
    },
    {
      "name": "CVE-2026-33672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33672"
    },
    {
      "name": "CVE-2026-76396",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76396"
    },
    {
      "name": "CVE-2026-76323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76323"
    },
    {
      "name": "CVE-2026-76368",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76368"
    },
    {
      "name": "CVE-2026-76259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76259"
    },
    {
      "name": "CVE-2026-76355",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76355"
    },
    {
      "name": "CVE-2026-76375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76375"
    },
    {
      "name": "CVE-2026-76325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76325"
    },
    {
      "name": "CVE-2026-76399",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76399"
    },
    {
      "name": "CVE-2026-76392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76392"
    },
    {
      "name": "CVE-2026-34516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34516"
    },
    {
      "name": "CVE-2026-27140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27140"
    },
    {
      "name": "CVE-2026-31789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31789"
    },
    {
      "name": "CVE-2026-34517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34517"
    },
    {
      "name": "CVE-2026-25535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25535"
    },
    {
      "name": "CVE-2026-42945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42945"
    },
    {
      "name": "CVE-2026-76362",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76362"
    },
    {
      "name": "CVE-2026-76389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76389"
    },
    {
      "name": "CVE-2026-31938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31938"
    },
    {
      "name": "CVE-2026-27784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27784"
    },
    {
      "name": "CVE-2026-76387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76387"
    },
    {
      "name": "CVE-2026-6276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6276"
    },
    {
      "name": "CVE-2026-76338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76338"
    },
    {
      "name": "CVE-2026-28753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28753"
    },
    {
      "name": "CVE-2026-76374",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76374"
    },
    {
      "name": "CVE-2026-33810",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
    },
    {
      "name": "CVE-2026-34513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34513"
    },
    {
      "name": "CVE-2026-9256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9256"
    },
    {
      "name": "CVE-2026-34514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34514"
    },
    {
      "name": "CVE-2026-28277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28277"
    },
    {
      "name": "CVE-2026-26996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
    },
    {
      "name": "CVE-2026-1287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1287"
    },
    {
      "name": "CVE-2026-76339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76339"
    },
    {
      "name": "CVE-2026-76348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76348"
    },
    {
      "name": "CVE-2025-14819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14819"
    },
    {
      "name": "CVE-2026-76353",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76353"
    },
    {
      "name": "CVE-2025-67724",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-67724"
    },
    {
      "name": "CVE-2026-41066",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41066"
    },
    {
      "name": "CVE-2026-76350",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76350"
    },
    {
      "name": "CVE-2026-34520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34520"
    },
    {
      "name": "CVE-2026-28684",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28684"
    },
    {
      "name": "CVE-2026-32141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32141"
    },
    {
      "name": "CVE-2026-76357",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76357"
    },
    {
      "name": "CVE-2026-2004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2004"
    },
    {
      "name": "CVE-2026-76317",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76317"
    },
    {
      "name": "CVE-2026-31898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31898"
    },
    {
      "name": "CVE-2026-24001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24001"
    },
    {
      "name": "CVE-2026-76310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76310"
    },
    {
      "name": "CVE-2026-76352",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76352"
    },
    {
      "name": "CVE-2026-25673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25673"
    },
    {
      "name": "CVE-2026-7168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7168"
    },
    {
      "name": "CVE-2025-6547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6547"
    },
    {
      "name": "CVE-2026-76398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76398"
    },
    {
      "name": "CVE-2025-67725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-67725"
    },
    {
      "name": "CVE-2026-29063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
    },
    {
      "name": "CVE-2026-76366",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76366"
    },
    {
      "name": "CVE-2025-68428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68428"
    },
    {
      "name": "CVE-2026-22815",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22815"
    },
    {
      "name": "CVE-2026-76311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76311"
    },
    {
      "name": "CVE-2026-76263",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76263"
    },
    {
      "name": "CVE-2026-76251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76251"
    },
    {
      "name": "CVE-2025-13465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
    },
    {
      "name": "CVE-2026-40460",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40460"
    },
    {
      "name": "CVE-2026-76333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76333"
    },
    {
      "name": "CVE-2026-44243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44243"
    },
    {
      "name": "CVE-2026-31790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31790"
    },
    {
      "name": "CVE-2026-2739",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2739"
    }
  ],
  "initial_release_date": "2026-08-20T00:00:00",
  "last_revision_date": "2026-08-20T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1056",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-08-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Injection SQL (SQLi)"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Splunk. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Splunk",
  "vendor_advisories": [
    {
      "published_at": "2026-08-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0807",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0807"
    },
    {
      "published_at": "2026-08-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0805",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0805"
    },
    {
      "published_at": "2026-08-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0803",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0803"
    },
    {
      "published_at": "2026-08-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0802",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0802"
    },
    {
      "published_at": "2026-08-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0801",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0801"
    },
    {
      "published_at": "2026-08-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0808",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0808"
    },
    {
      "published_at": "2026-08-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0806",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0806"
    },
    {
      "published_at": "2026-08-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Splunk SVD-2026-0804",
      "url": "https://advisory.splunk.com/advisories/SVD-2026-0804"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted