# Vulnerabilities published in 2026


- [CVE-2026-76398](https://insights.sbomify.com/CVE-2026-76398/): Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit (medium 4.3)
- [CVE-2026-76397](https://insights.sbomify.com/CVE-2026-76397/): Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit (high 8.1)
- [CVE-2026-76396](https://insights.sbomify.com/CVE-2026-76396/): Improper Access Control through Scheduled Searches in Splunk AI Toolkit (high 7.5)
- [CVE-2026-76395](https://insights.sbomify.com/CVE-2026-76395/): Deserialization in Splunk AI Toolkit (high 8.8)
- [CVE-2026-76394](https://insights.sbomify.com/CVE-2026-76394/): Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit (high 8.3)
- [CVE-2026-76393](https://insights.sbomify.com/CVE-2026-76393/): Race Condition during Model Upload through the REST API in Splunk AI Toolkit (medium 5.9)
- [CVE-2026-76392](https://insights.sbomify.com/CVE-2026-76392/): Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit (medium 5.4)
- [CVE-2026-76391](https://insights.sbomify.com/CVE-2026-76391/): Improper Privilege Management through Agent Run History in Splunk AI Toolkit (high 8.3)
- [CVE-2026-76390](https://insights.sbomify.com/CVE-2026-76390/): Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud (medium 5.3)
- [CVE-2026-7639](https://insights.sbomify.com/CVE-2026-7639/): GPU DDK - Page UAF read in PMMETA_PROTECT heap memory (high 7.8)
- [CVE-2026-76389](https://insights.sbomify.com/CVE-2026-76389/): Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security Cloud (high 8.8)
- [CVE-2026-76388](https://insights.sbomify.com/CVE-2026-76388/): Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security (high 8.1)
- [CVE-2026-76387](https://insights.sbomify.com/CVE-2026-76387/): SPL Injection through the REST API in Splunk Enterprise Security (high 8.1)
- [CVE-2026-76386](https://insights.sbomify.com/CVE-2026-76386/): Information Disclosure through Action Parameters in Zoom app for Splunk SOAR (medium 4.3)
- [CVE-2026-76385](https://insights.sbomify.com/CVE-2026-76385/): Information Disclosure through Action Parameters in Venafi app for Splunk SOAR (medium 4.3)
- [CVE-2026-76384](https://insights.sbomify.com/CVE-2026-76384/): Information Disclosure through Action Parameters in Splunk Attack Analyzer Connector for Splunk SOAR (medium 4.3)
- [CVE-2026-76383](https://insights.sbomify.com/CVE-2026-76383/): Information Disclosure through Action Parameters in RSA SecurID Authentication Manager app for Splunk SOAR (medium 4.3)
- [CVE-2026-76382](https://insights.sbomify.com/CVE-2026-76382/): Information Disclosure through Action Parameters in Phantom app for Splunk SOAR (medium 4.3)
- [CVE-2026-76381](https://insights.sbomify.com/CVE-2026-76381/): Information Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOAR (medium 4.3)
- [CVE-2026-76380](https://insights.sbomify.com/CVE-2026-76380/): Information Disclosure through Action Parameters in CrowdStrike OAuth API app for Splunk SOAR (medium 4.3)
- [CVE-2026-7638](https://insights.sbomify.com/CVE-2026-7638/): Missing authorization in App Builder – Create Native Android & iOS Apps On The Flight (medium 5.3)
- [CVE-2026-76379](https://insights.sbomify.com/CVE-2026-76379/): Information Disclosure through Action Parameters in Cisco Webex app for Splunk SOAR (medium 4.3)
- [CVE-2026-76378](https://insights.sbomify.com/CVE-2026-76378/): Information Disclosure through Action Parameters in Cisco Secure Malware Analytics app for Splunk SOAR (medium 4.3)
- [CVE-2026-76377](https://insights.sbomify.com/CVE-2026-76377/): Information Disclosure through Action Parameters in Azure AD Graph app for Splunk SOAR (medium 4.3)
- [CVE-2026-76376](https://insights.sbomify.com/CVE-2026-76376/): Information Disclosure through Action Parameters in AWS IAM app for Splunk SOAR (medium 4.3)
- [CVE-2026-76375](https://insights.sbomify.com/CVE-2026-76375/): Information Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR (medium 5.0)
- [CVE-2026-76374](https://insights.sbomify.com/CVE-2026-76374/): Information Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR (medium 4.3)
- [CVE-2026-76373](https://insights.sbomify.com/CVE-2026-76373/): Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR (medium 5.4)
- [CVE-2026-76372](https://insights.sbomify.com/CVE-2026-76372/): Incorrect Permission Assignment through Safe Mode in Nmap Scanner for Splunk SOAR (medium 6.6)
- [CVE-2026-76371](https://insights.sbomify.com/CVE-2026-76371/): Incorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOAR (low 2.7)
- [CVE-2026-76370](https://insights.sbomify.com/CVE-2026-76370/): Information Disclosure through the REST API in Splunk SOAR (medium 4.3)
- [CVE-2026-7637](https://insights.sbomify.com/CVE-2026-7637/): Boost <= 2.0.3 - Unauthenticated PHP Object Injection via STYXKEY-BOOST_USER_LOCATION Cookie (critical 9.8)
- [CVE-2026-76369](https://insights.sbomify.com/CVE-2026-76369/): Path Traversal through Automation Broker in Splunk SOAR (low 2.7)
- [CVE-2026-76368](https://insights.sbomify.com/CVE-2026-76368/): Missing Authorization through Playbooks in Splunk SOAR (low 2.7)
- [CVE-2026-76367](https://insights.sbomify.com/CVE-2026-76367/): Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR (medium 4.0)
- [CVE-2026-76366](https://insights.sbomify.com/CVE-2026-76366/): Information Disclosure through the REST API in Splunk SOAR (medium 6.5)
- [CVE-2026-76365](https://insights.sbomify.com/CVE-2026-76365/): Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR (medium 6.5)
- [CVE-2026-76364](https://insights.sbomify.com/CVE-2026-76364/): Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR (medium 6.5)
- [CVE-2026-76363](https://insights.sbomify.com/CVE-2026-76363/): Structured Query Language Injection through the REST API in Splunk SOAR (medium 6.5)
- [CVE-2026-76362](https://insights.sbomify.com/CVE-2026-76362/): Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR (high 7.4)
- [CVE-2026-76361](https://insights.sbomify.com/CVE-2026-76361/): Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR (low 2.7)
- [CVE-2026-76360](https://insights.sbomify.com/CVE-2026-76360/): Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR (medium 4.3)
- [CVE-2026-7636](https://insights.sbomify.com/CVE-2026-7636/): Slider by Soliloquy <= 2.8.1 - Authenticated (Subscriber+) Information Disclosure via REST API Endpoint (medium 4.3)
- [CVE-2026-76359](https://insights.sbomify.com/CVE-2026-76359/): Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR (medium 6.5)
- [CVE-2026-76358](https://insights.sbomify.com/CVE-2026-76358/): Path Traversal through App Installation Tar Extraction in Splunk SOAR (medium 6.5)
- [CVE-2026-76357](https://insights.sbomify.com/CVE-2026-76357/): Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR (high 7.6)
- [CVE-2026-76356](https://insights.sbomify.com/CVE-2026-76356/): Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR (high 8.1)
- [CVE-2026-76355](https://insights.sbomify.com/CVE-2026-76355/): Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise (high 7.5)
- [CVE-2026-76354](https://insights.sbomify.com/CVE-2026-76354/): Path Traversal through Search Head Clustering in Splunk Enterprise (high 8.1)
- [CVE-2026-76353](https://insights.sbomify.com/CVE-2026-76353/): Path Traversal through Knowledge Bundle Replication in Splunk Enterprise (medium 5.4)
- [CVE-2026-76352](https://insights.sbomify.com/CVE-2026-76352/): Improper Authorization through the REST API in Splunk Enterprise (high 8.8)
- [CVE-2026-76351](https://insights.sbomify.com/CVE-2026-76351/): Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway (high 8.8)
- [CVE-2026-76350](https://insights.sbomify.com/CVE-2026-76350/): Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise (high 8.8)
- [CVE-2026-7635](https://insights.sbomify.com/CVE-2026-7635/): Deserialization in coreActivity: Activity Logging for WordPress (high 8.1)
- [CVE-2026-76349](https://insights.sbomify.com/CVE-2026-76349/): SPL Injection through Splunk Web Form Tokens in Splunk Enterprise (medium 6.4)
- [CVE-2026-76348](https://insights.sbomify.com/CVE-2026-76348/): Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise (low 3.8)
- [CVE-2026-76347](https://insights.sbomify.com/CVE-2026-76347/): Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway (medium 5.4)
- [CVE-2026-76346](https://insights.sbomify.com/CVE-2026-76346/): Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise (medium 5.4)
- [CVE-2026-76345](https://insights.sbomify.com/CVE-2026-76345/): Remote Code Execution (RCE) through the REST API in Splunk Enterprise (medium 6.0)
- [CVE-2026-76344](https://insights.sbomify.com/CVE-2026-76344/): Path Traversal through the Search Dispatch REST API in Splunk Enterprise (high 7.7)
- [CVE-2026-76343](https://insights.sbomify.com/CVE-2026-76343/): Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise (medium 6.5)
- [CVE-2026-76342](https://insights.sbomify.com/CVE-2026-76342/): Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise (medium 5.4)
- [CVE-2026-76341](https://insights.sbomify.com/CVE-2026-76341/): Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise (medium 5.4)
- [CVE-2026-76340](https://insights.sbomify.com/CVE-2026-76340/): Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise (medium 5.3)
- [CVE-2026-7634](https://insights.sbomify.com/CVE-2026-7634/): SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header (high 7.2)
- [CVE-2026-76339](https://insights.sbomify.com/CVE-2026-76339/): SPL Injection through the geostats Command in Splunk Enterprise (medium 5.4)
- [CVE-2026-76338](https://insights.sbomify.com/CVE-2026-76338/): Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise (high 8.1)
- [CVE-2026-76337](https://insights.sbomify.com/CVE-2026-76337/): Path Traversal through Splunk Web Static File Serving in Splunk Enterprise (medium 5.3)
- [CVE-2026-76336](https://insights.sbomify.com/CVE-2026-76336/): Improper Access Control through the REST API in Splunk Enterprise (high 7.1)
- [CVE-2026-76335](https://insights.sbomify.com/CVE-2026-76335/): Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise (high 8.8)
- [CVE-2026-76334](https://insights.sbomify.com/CVE-2026-76334/): SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise (medium 6.4)
- [CVE-2026-76333](https://insights.sbomify.com/CVE-2026-76333/): Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise (high 7.1)
- [CVE-2026-76332](https://insights.sbomify.com/CVE-2026-76332/): SPL Injection through Splunk Web in Splunk Enterprise (high 7.1)
- [CVE-2026-76331](https://insights.sbomify.com/CVE-2026-76331/): SPL Injection through the REST API in Splunk Enterprise (high 8.1)
- [CVE-2026-76330](https://insights.sbomify.com/CVE-2026-76330/): SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise (high 7.1)
- [CVE-2026-7633](https://insights.sbomify.com/CVE-2026-7633/): Totolink N300RH cstecgi.cgi setUploadSetting file inclusion (medium 6.9)
- [CVE-2026-76329](https://insights.sbomify.com/CVE-2026-76329/): SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise (medium 6.4)
- [CVE-2026-76328](https://insights.sbomify.com/CVE-2026-76328/): SPL Injection through Splunk Web in Splunk Enterprise (medium 6.7)
- [CVE-2026-76327](https://insights.sbomify.com/CVE-2026-76327/): SPL Injection through Splunk Web in Splunk Secure Gateway (medium 6.4)
- [CVE-2026-76326](https://insights.sbomify.com/CVE-2026-76326/): Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise (medium 5.7)
- [CVE-2026-76325](https://insights.sbomify.com/CVE-2026-76325/): Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise (high 7.3)
- [CVE-2026-76324](https://insights.sbomify.com/CVE-2026-76324/): Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise (medium 5.7)
- [CVE-2026-76323](https://insights.sbomify.com/CVE-2026-76323/): SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise (medium 6.4)
- [CVE-2026-76322](https://insights.sbomify.com/CVE-2026-76322/): SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise (medium 6.7)
- [CVE-2026-76321](https://insights.sbomify.com/CVE-2026-76321/): SPL Injection through Nearby Event Searches in Splunk Enterprise (high 7.3)
- [CVE-2026-76320](https://insights.sbomify.com/CVE-2026-76320/): SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise (medium 5.9)
- [CVE-2026-7632](https://insights.sbomify.com/CVE-2026-7632/): code-projects Online Hospital Management System viewappointment.php sql injection (medium 6.9)
- [CVE-2026-76319](https://insights.sbomify.com/CVE-2026-76319/): Remote Code Execution (RCE) through Federated Search in Splunk Enterprise (high 8.8)
- [CVE-2026-76318](https://insights.sbomify.com/CVE-2026-76318/): Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise (medium 5.7)
- [CVE-2026-76317](https://insights.sbomify.com/CVE-2026-76317/): Path Traversal through the Lookup Configuration REST API in Splunk Enterprise (high 8.8)
- [CVE-2026-76316](https://insights.sbomify.com/CVE-2026-76316/): Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise (high 8.8)
- [CVE-2026-76315](https://insights.sbomify.com/CVE-2026-76315/): Code Injection through Splunk Web Manager Configuration in Splunk Enterprise (high 8.8)
- [CVE-2026-76314](https://insights.sbomify.com/CVE-2026-76314/): Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise (high 8.8)
- [CVE-2026-76313](https://insights.sbomify.com/CVE-2026-76313/): Remote Code Execution (RCE) through the REST API in Splunk Enterprise (high 8.8)
- [CVE-2026-76312](https://insights.sbomify.com/CVE-2026-76312/): Improper Access Control through Embedded Reports in Splunk Enterprise (critical 9.4)
- [CVE-2026-76311](https://insights.sbomify.com/CVE-2026-76311/): Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise (critical 9.4)
- [CVE-2026-76310](https://insights.sbomify.com/CVE-2026-76310/): Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise (critical 9.4)
- [CVE-2026-7631](https://insights.sbomify.com/CVE-2026-7631/): code-projects Online Hospital Management System Registration improper authorization (medium 5.3)
- [CVE-2026-76309](https://insights.sbomify.com/CVE-2026-76309/): Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise (medium 4.3)
- [CVE-2026-76308](https://insights.sbomify.com/CVE-2026-76308/): Missing Authorization through the REST API in Splunk SOAR (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/378/