Spremljamo ranljivosti v izdelkih največjih proizvajalcev, kot so Microsoft, Cisco, Fortinet, Citrix in drugi. Izberite proizvajalca za seznam njegovih aktivnih ranljivosti in naših člankov.
Splunk: ranljivosti v zadnjem letu
| CVE | CVSS | EPSS | CISA KEV | Proizvajalec | Opis (NVD, angleško) |
|---|---|---|---|---|---|
| CVE-2026-20253 | 9,8 Kritično | 96,9 % | Aktivno izkoriščana od 18. 6. 2026 | Splunk | In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service endpoi |
| CVE-2026-76291 | 8,8 Visoko | 0,4 % | – | Splunk | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedule_search capability could bypass the expected safeguards in the scheduled search workflow. The user could then run risky Search Processing Languag |
| CVE-2026-76298 | 8,8 Visoko | 0,4 % | – | Splunk | In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk roles could derive the PostgreSQL sidecar database superuser password and run arbitrary operating system commands as the user account running Splunk E |
| CVE-2026-76290 | 7,5 Visoko | 0,5 % | – | Splunk | In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download endpoint in the Splunk Pipeline Builders app. The requests could cause the Splunk daemon to consume exc |
| CVE-2026-76288 | 7,5 Visoko | 0,5 % | – | Splunk | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single crafted request to the Splunk Web JavaScript logger endpoint and cause Splunk Web to stop responding to requests. Splunk Web remains unavailabl |
| CVE-2026-76293 | 7,2 Visoko | 0,5 % | – | Splunk | In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_xml capability could execute arbitrary operating-system commands using the permissions of the user account running Splunk Enterprise by open |
| CVE-2026-76289 | 6,5 Srednje | 0,4 % | – | Splunk | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could make the Splunk Enterprise instance unavailable to other users by sending a request to the Representational State Transf |
| CVE-2026-76292 | 6,5 Srednje | 0,3 % | – | Splunk | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a low-privileged user that does not hold the "admin" Splunk role or the "sc_admin" Splunk Secure Gateway role could r |
| CVE-2026-76406 | 5,9 Srednje | 0,3 % | – | Splunk | In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected Splunk SOAR instance could submit Basic authentication data to the Representational State Transfer (REST) API to expose and decrypt that encr |
| CVE-2026-76287 | 5,4 Srednje | 0,2 % | – | Splunk | In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capability or edit_data_management_pipeline_job capability could read or delete Data Management SPL2 preview jobs and results outside their ownership |
| CVE-2026-76297 | 5,4 Srednje | 0,1 % | – | Splunk | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with the edit_federated_providers capability into turning off all federated search providers. Successful exploitation could te |
| CVE-2026-76295 | 4,3 Srednje | 0,3 % | – | Splunk | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a user who does not hold the "admin" or "power" Splunk roles could view dashboard and report listings beyond the requ |
| CVE-2026-76294 | 4,3 Srednje | 0,3 % | – | Splunk | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could move field extractions or field transformations to apps for which the user does not have read access. The vulnerability |
| CVE-2026-76296 | 4,3 Srednje | 0,2 % | – | Splunk | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could create, move, edit, or delete sourcetype renaming configurations that they own in apps that they do not have permission |
Naši članki: Splunk
Kako se primerljivo porovnava Wazuh z komercialnimi SIEM rešitvami
Wazuh je odprtokodna platforma za upravljanje varnosti, ki združuje funkcionalnosti SIEM (Security Information and Event Management) in XDR (Extended Detection and Response). V primerjavi s komercialnimi...
Wazuh SIEM: Brezplačna rešitev, ki lahko tekmuje z najboljšimi SIEM orodji na trgu
V sodobnem poslovnem svetu, kjer so kibernetske grožnje vedno bolj kompleksne in raznolika, je učinkovito upravljanje varnosti ključnega pomena za zaščito podjetij. Wazuh, odprtokodni varnostni informacijski...