CVE-2026-15723 is a high-severity LDAP injection vulnerability in GitLab CE/EE affecting versions from 10.1 up to but not including 19.3.6, 19.4 up to 19.4.3, and 19.5 up to 19.5.1. The flaw occurs when OmniAuth SAML and LDAP auto-linking are both enabled, allowing an authenticated user to take over an existing LDAP-backed account without interaction from the targeted user due to improper input sanitization in the LDAP email lookup path during OmniAuth identity linking. This issue has been fixed in GitLab versions 19.3.6, 19.4.3, and 19.5.1.
CVE-2026-76300 is a high-severity vulnerability affecting Splunk Enterprise versions prior to 9.4.16, 10.0.11, 10.2.8, and 10.4.4. It involves improper control of a resource throughout its lifetime, classified under CWE-664. The flaw can lead to significant confidentiality, integrity, and availability impacts. Affected versions have been fixed in the specified releases.
CVE-2026-76298 affects Splunk Enterprise versions prior to 10.4.4 and 10.2.8. It allows non-admin and non-power users to derive the PostgreSQL sidecar database superuser password and execute arbitrary OS commands as the Splunk Enterprise user on search head cluster members. This vulnerability arises because the privileged database password is derived from the search head cluster identifier, which is exposed in search job logs. The issue is fixed in versions 10.4.4 and 10.2.8.
CVE-2026-76297 affects Splunk Enterprise versions prior to 10.4.4, 10.2.8, 10.0.11, and 9.4.16. It allows an unauthenticated attacker to trick a user with the edit_federated_providers capability into disabling all federated search providers via a REST API that improperly accepts GET requests for state-changing actions. Exploitation requires phishing the privileged user to initiate the malicious request in their browser. This can temporarily disrupt federated searches from retrieving remote data.
CVE-2026-76296 affects Splunk Enterprise versions prior to 10.4.4, 10.2.8, 10.0.11, and 9.4.16. It allows users without admin or power roles to create, move, edit, or delete sourcetype renaming configurations in apps they do not have permission to access when Splunk Web is enabled. This occurs because Splunk Web does not verify app permissions before performing these operations.
CVE-2026-76294 is a vulnerability in Splunk Enterprise versions prior to 10.4.4, 10.2.8, 10.0.11, and 9.4.16. It allows users without admin or power roles to move field extractions or transformations to apps they do not have read access to. This occurs because the REST API does not validate destination app access during these operations.
CVE-2026-76293 is a high-severity vulnerability in Splunk Enterprise versions prior to 10.4.3, 10.2.8, 10.0.11, and 9.4.16. It allows users with the edit_manager_xml capability to execute arbitrary operating system commands with the privileges of the Splunk Enterprise service account by opening a specially crafted configuration in the Splunk Web Manager. This occurs because the application evaluates user-controlled expressions in Manager XML without sufficient syntax restrictions. The issue is fixed in versions 10.4.3, 10.2.8, 10.0.11, and 9.4.16.
CVE-2026-76292 affects certain versions of Splunk Enterprise and Splunk Secure Gateway where low-privileged users without admin roles can read mobile alert notification data of other users. This occurs due to missing user-level authorization checks on read requests to the Splunk Secure Gateway App Key Value Store REST API endpoints. The issue is fixed in Splunk Enterprise versions 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions 3.10.12, 3.9.26, and 3.8.73.
CVE-2026-76291 affects Splunk Enterprise versions prior to 10.4.4, 10.2.8, 10.0.11, and 9.4.16. It allows users with the schedule_search capability to bypass safeguards in the scheduled search workflow and execute risky SPL commands. These commands can disclose or modify data or disrupt availability. The vulnerability arises because the search scheduler does not enforce SPL safeguards on scheduled searches. A fix is available in the specified patched versions.
CVE-2026-76290 affects Splunk Enterprise versions prior to 10.4.4, 10.2.8, and 10.0.11. An unauthenticated attacker can repeatedly request package downloads from the Edge Processor endpoint, causing excessive resource consumption and potential service disruption. The vulnerability arises because the endpoint processes package downloads without authentication and loads the entire package into memory for each request. Fixed versions address this by requiring authentication and improving resource handling.
CVE-2026-76289 is a denial-of-service vulnerability in Splunk Enterprise versions prior to 10.4.4, 10.2.8, 10.0.11, and 9.4.16. A user without admin or power roles can send crafted requests to the REST API endpoint for lookup table files, causing resource exhaustion that makes the instance unavailable to other users until it is restarted.
CVE-2026-76288 is a denial-of-service vulnerability in Splunk Enterprise versions prior to 10.4.4, 10.2.8, 10.0.11, and 9.4.16. An unauthenticated attacker can send a crafted request to the Splunk Web JavaScript logger endpoint, causing Splunk Web to become unresponsive until the service is restarted. The issue arises from insufficient limits on request-header parsing in Splunk Web.
CVE-2026-76287 is a vulnerability in Splunk Enterprise versions 10.4 up to but not including 10.4.4. It allows users with specific roles (preview_data_management_pipeline or edit_data_management_pipeline_job) to read or delete Data Management SPL2 preview jobs and results that they do not own. This occurs because the Data Management REST API checks user capabilities but does not verify ownership of the preview job. The vulnerability only affects systems with the Edge Processor feature enabled, which is off by default. A fix is available in version 10.4.4.
A medium severity vulnerability (CVE-2026-114501) affects the Pillow Python imaging library versions from 11.2.1 up to but not including 13.0.0. The vulnerability has a CVSS 4.0 score of 6.3, indicating a network exploitable issue with low complexity and no user interaction required. The exact technical details of the flaw are not fully provided in the input data.
Robots::Validate versions from 0.4.3 up to but not including 0.4.10 for Perl have a vulnerability where the User-Agent matcher state is not reset between requests. This causes the matcher to carry over partial matches from one User-Agent string to the next, potentially causing legitimate clients to be misidentified as imposter robots. The issue affects both the pure-Perl and Algorithm::AhoCorasick::XS implementations due to a separate bug. The vulnerability is fixed in version 0.4.10.
A vulnerability exists in the Pillow Python imaging library prior to version 13.0.0 affecting the PILfont text-width functionality. The flaw has a CVSS 3.1 base score of 6.5, indicating a medium severity impact primarily causing availability disruption. No known exploits are reported in the wild. Multiple Ubuntu package versions of Pillow are affected.
A high-severity vulnerability (CVE-2026-96640) affects the Pillow Python imaging library versions from 5.1.0 up to 13.0.0. The issue involves the PdfParser component, though specific technical details are not provided. The vulnerability has a CVSS 4.0 base score of 8.2, indicating a network-exploitable flaw with high impact. Multiple Ubuntu package versions of Pillow are affected. No public exploits or vendor patch information are available in the provided data.
A vulnerability exists in the Pillow Python imaging library affecting versions from 9.1.0 up to but not including 13.0.0. The issue relates to the BmpRleDec component. The CVSS 3.1 base score is 6.5, indicating a medium severity impact primarily affecting availability. No public exploits or known active exploitation have been reported. The affected versions include specific Ubuntu package builds of Pillow. No patch or remediation details are provided in the available data.
A vulnerability exists in the Pillow Python imaging library prior to version 13.0.0 involving the MpoImageFile.seek function. The flaw can cause a denial of service condition. The issue affects multiple Ubuntu package versions of Pillow. The CVSS score is 6.5, indicating a medium severity impact primarily due to availability disruption.
A high-severity vulnerability (CVE-2026-114145) in python-git (GitPython) allows remote code execution due to validation of a submodule's .git path only occurring after cloning into it. This flaw affects multiple specific versions of the python-git package. The vulnerability has a CVSS score of 7.5, indicating a high impact on confidentiality, integrity, and availability. No public exploits or known in-the-wild exploitation have been reported. The vulnerability is not related to a cloud service and no patch information is provided in the data.