Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 378 of 1013.
- CVE-2026-76398 Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit
- CVE-2026-76397 Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit
- CVE-2026-76396 Improper Access Control through Scheduled Searches in Splunk AI Toolkit
- CVE-2026-76395 Deserialization in Splunk AI Toolkit
- CVE-2026-76394 Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit
- CVE-2026-76393 Race Condition during Model Upload through the REST API in Splunk AI Toolkit
- CVE-2026-76392 Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit
- CVE-2026-76391 Improper Privilege Management through Agent Run History in Splunk AI Toolkit
- CVE-2026-76390 Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud
- CVE-2026-7639 GPU DDK - Page UAF read in PMMETA_PROTECT heap memory
- CVE-2026-76389 Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security Cloud
- CVE-2026-76388 Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security
- CVE-2026-76387 SPL Injection through the REST API in Splunk Enterprise Security
- CVE-2026-76386 Information Disclosure through Action Parameters in Zoom app for Splunk SOAR
- CVE-2026-76385 Information Disclosure through Action Parameters in Venafi app for Splunk SOAR
- CVE-2026-76384 Information Disclosure through Action Parameters in Splunk Attack Analyzer Connector for Splunk SOAR
- CVE-2026-76383 Information Disclosure through Action Parameters in RSA SecurID Authentication Manager app for Splunk SOAR
- CVE-2026-76382 Information Disclosure through Action Parameters in Phantom app for Splunk SOAR
- CVE-2026-76381 Information Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOAR
- CVE-2026-76380 Information Disclosure through Action Parameters in CrowdStrike OAuth API app for Splunk SOAR
- CVE-2026-7638 Missing authorization in App Builder – Create Native Android & iOS Apps On The Flight
- CVE-2026-76379 Information Disclosure through Action Parameters in Cisco Webex app for Splunk SOAR
- CVE-2026-76378 Information Disclosure through Action Parameters in Cisco Secure Malware Analytics app for Splunk SOAR
- CVE-2026-76377 Information Disclosure through Action Parameters in Azure AD Graph app for Splunk SOAR
- CVE-2026-76376 Information Disclosure through Action Parameters in AWS IAM app for Splunk SOAR
- CVE-2026-76375 Information Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR
- CVE-2026-76374 Information Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR
- CVE-2026-76373 Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR
- CVE-2026-76372 Incorrect Permission Assignment through Safe Mode in Nmap Scanner for Splunk SOAR
- CVE-2026-76371 Incorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOAR
- CVE-2026-76370 Information Disclosure through the REST API in Splunk SOAR
- CVE-2026-7637 Boost <= 2.0.3 - Unauthenticated PHP Object Injection via STYXKEY-BOOST_USER_LOCATION Cookie
- CVE-2026-76369 Path Traversal through Automation Broker in Splunk SOAR
- CVE-2026-76368 Missing Authorization through Playbooks in Splunk SOAR
- CVE-2026-76367 Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR
- CVE-2026-76366 Information Disclosure through the REST API in Splunk SOAR
- CVE-2026-76365 Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR
- CVE-2026-76364 Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR
- CVE-2026-76363 Structured Query Language Injection through the REST API in Splunk SOAR
- CVE-2026-76362 Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR
- CVE-2026-76361 Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR
- CVE-2026-76360 Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR
- CVE-2026-7636 Slider by Soliloquy <= 2.8.1 - Authenticated (Subscriber+) Information Disclosure via REST API Endpoint
- CVE-2026-76359 Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR
- CVE-2026-76358 Path Traversal through App Installation Tar Extraction in Splunk SOAR
- CVE-2026-76357 Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR
- CVE-2026-76356 Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR
- CVE-2026-76355 Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise
- CVE-2026-76354 Path Traversal through Search Head Clustering in Splunk Enterprise
- CVE-2026-76353 Path Traversal through Knowledge Bundle Replication in Splunk Enterprise
- CVE-2026-76352 Improper Authorization through the REST API in Splunk Enterprise
- CVE-2026-76351 Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway
- CVE-2026-76350 Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise
- CVE-2026-7635 Deserialization in coreActivity: Activity Logging for WordPress
- CVE-2026-76349 SPL Injection through Splunk Web Form Tokens in Splunk Enterprise
- CVE-2026-76348 Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise
- CVE-2026-76347 Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway
- CVE-2026-76346 Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise
- CVE-2026-76345 Remote Code Execution (RCE) through the REST API in Splunk Enterprise
- CVE-2026-76344 Path Traversal through the Search Dispatch REST API in Splunk Enterprise
- CVE-2026-76343 Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise
- CVE-2026-76342 Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise
- CVE-2026-76341 Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise
- CVE-2026-76340 Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise
- CVE-2026-7634 SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header
- CVE-2026-76339 SPL Injection through the geostats Command in Splunk Enterprise
- CVE-2026-76338 Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise
- CVE-2026-76337 Path Traversal through Splunk Web Static File Serving in Splunk Enterprise
- CVE-2026-76336 Improper Access Control through the REST API in Splunk Enterprise
- CVE-2026-76335 Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise
- CVE-2026-76334 SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise
- CVE-2026-76333 Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise
- CVE-2026-76332 SPL Injection through Splunk Web in Splunk Enterprise
- CVE-2026-76331 SPL Injection through the REST API in Splunk Enterprise
- CVE-2026-76330 SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise
- CVE-2026-7633 Totolink N300RH cstecgi.cgi setUploadSetting file inclusion
- CVE-2026-76329 SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise
- CVE-2026-76328 SPL Injection through Splunk Web in Splunk Enterprise
- CVE-2026-76327 SPL Injection through Splunk Web in Splunk Secure Gateway
- CVE-2026-76326 Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise
- CVE-2026-76325 Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise
- CVE-2026-76324 Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise
- CVE-2026-76323 SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise
- CVE-2026-76322 SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise
- CVE-2026-76321 SPL Injection through Nearby Event Searches in Splunk Enterprise
- CVE-2026-76320 SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise
- CVE-2026-7632 code-projects Online Hospital Management System viewappointment.php sql injection
- CVE-2026-76319 Remote Code Execution (RCE) through Federated Search in Splunk Enterprise
- CVE-2026-76318 Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise
- CVE-2026-76317 Path Traversal through the Lookup Configuration REST API in Splunk Enterprise
- CVE-2026-76316 Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise
- CVE-2026-76315 Code Injection through Splunk Web Manager Configuration in Splunk Enterprise
- CVE-2026-76314 Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise
- CVE-2026-76313 Remote Code Execution (RCE) through the REST API in Splunk Enterprise
- CVE-2026-76312 Improper Access Control through Embedded Reports in Splunk Enterprise
- CVE-2026-76311 Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise
- CVE-2026-76310 Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise
- CVE-2026-7631 code-projects Online Hospital Management System Registration improper authorization
- CVE-2026-76309 Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise
- CVE-2026-76308 Missing Authorization through the REST API in Splunk SOAR