CVE-2026-76330 is a vulnerability in Splunk Enterprise that affects versions prior to 10.4.2, 10.2.6, 10.0.9, and 9.4.14. It allows an unauthenticated attacker to trick an authenticated user into opening a malicious Monitoring Console link, causing the system to execute attacker-controlled Search Processing Language (SPL) commands with the authenticated user's permissions. This occurs due to insufficient validation of data used in forwarder dashboard searches. Exploitation requires user interaction via phishing and cannot be performed directly by the attacker without user involvement.
CVE-2026-76329 is a vulnerability in Splunk Enterprise versions prior to 10.4.2, 10.2.6, 10.0.9, and 9.4.14. It allows an unauthenticated attacker to trick an admin user into opening a crafted Monitoring Console link that executes attacker-controlled Search Processing Language (SPL) commands with the admin's permissions. This can lead to exposure of data accessible to the admin or modification of lookup data. Exploitation requires phishing the admin user to open the malicious link. The vulnerability arises from insufficient validation of data used in dashboard searches within the Monitoring Console.
CVE-2026-76328 affects Splunk Enterprise versions prior to 10.4.1, 10.2.6, 10.0.9, and 9.4.14. It allows a user with the "power" Splunk role to store malicious Search Processing Language (SPL) code in a dashboard. When another authenticated user exports this dashboard as a PDF, the injected SPL executes with the exporting user's permissions, potentially accessing or modifying their data. The vulnerability arises from insufficient validation of dashboard content during PDF export. Exploitation requires phishing the affected user to trigger the export action. The vulnerability has a CVSS score of 6.7, indicating medium severity.
CVE-2026-76327 is a vulnerability in Splunk Enterprise and Splunk Secure Gateway versions prior to specified fixed releases. It allows an unauthenticated attacker to trick an admin or sc_admin user into opening a crafted URL that executes arbitrary Search Processing Language (SPL) commands with the victim's permissions. This occurs because dashboard searches do not properly neutralize user-supplied input, enabling modification of query logic. Exploitation requires phishing the targeted user to initiate the request in their browser. The vulnerability can expose data accessible to the user and affect search results or lookup data.
CVE-2026-76323 is a vulnerability in Splunk Enterprise versions prior to 10.4.2, 10.2.6, 10.0.9, and 9.4.14. It allows non-admin and non-power users to bypass Search Processing Language (SPL) safeguards via the Job Details dashboard by injecting crafted SPL commands. Exploitation requires tricking an authenticated user into opening a malicious Job Details dashboard link, which then executes SPL with that user's permissions. This can lead to unauthorized access to data and impact system integrity within the scope of the user's permissions.
CVE-2026-76319 is a high-severity vulnerability in Splunk Enterprise versions prior to 10.4.2, 10.2.6, 10.0.9, and 9.4.14. It allows a low-privileged user without the fsh_manage capability to perform remote code execution via Federated Search bundle selection. This occurs because the system does not enforce authorization checks on the caller-controlled bundle selection in the Federated Search dispatch flow. Exploitation could lead to unauthorized access to data and compromise system integrity and availability.
CVE-2026-76253 is a privilege management vulnerability in Splunk Enterprise versions prior to 10.4.2, 10.2.6, 10.0.9, and 9.4.14. Users with the schedule_search capability can execute arbitrary SPL commands with the highest system privileges, allowing them to read and modify all stored credentials and potentially impact system integrity and availability. This occurs because scheduled search alert action configurations do not properly restrict user-specific alert action settings before execution.
CVE-2026-71033 is a vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0. It allows a low privileged attacker with logon access to the infrastructure to compromise the product, potentially gaining unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 5.5, indicating a medium severity with high confidentiality impact but no impact on integrity or availability.
CVE-2026-71028 is a high-severity vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0. It allows a low privileged attacker with logon access to the infrastructure to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 7.8. Oracle has acknowledged the issue in their August 2026 Critical Security Patch Update advisory but has not explicitly published a patch for this specific version in the provided data.
CVE-2026-71010 is a vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0. It allows an unauthenticated attacker with logon access to the infrastructure hosting the product to compromise it. Exploitation requires human interaction from a person other than the attacker. Successful exploitation can lead to full takeover of the affected Oracle Commerce components. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-70992 is a vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0. It allows a low privileged attacker with logon access to the infrastructure to potentially take over the affected product. The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-70991 is a vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0. It allows an unauthenticated attacker who has logon access to the infrastructure where the product runs to compromise it. Successful exploitation requires human interaction from a person other than the attacker. The vulnerability can lead to unauthorized access to critical data within the affected product and may impact additional Oracle products. The CVSS 3.1 base score is 6.3, indicating a medium severity with significant confidentiality impact.
CVE-2026-70989 is a vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0. It allows a low privileged attacker with logon access to the infrastructure to compromise the product, potentially leading to unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with significant confidentiality impact. Attacks exploiting this vulnerability may also affect additional Oracle Commerce products due to scope change. Oracle has published a Critical Security Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for this specific version in the provided content.
CVE-2026-60757 is a high-severity vulnerability in the Oracle Siebel CRM End User product, specifically in the Search component. It affects versions from 17.0 through 26.6. An unauthenticated attacker with access to the physical communication segment attached to the hardware running Siebel CRM End User can exploit this vulnerability. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, or complete unauthorized access to all data accessible by the Siebel CRM End User.
CVE-2026-71472 is a critical OS command injection vulnerability in Red Hat Advanced Cluster Management for Kubernetes 2.11. An authenticated attacker with high privileges, such as a hub administrator or Search Custom Resource editor, can inject malicious shell commands or SQL statements due to improper validation of the WORK_MEM string used in bash scripts and SQL queries. Successful exploitation could lead to arbitrary code execution within the privileged postgres pod, compromising the system.
A critical vulnerability in Squirro Cognitive Search versions prior to 3.14.2 allows remote attackers to execute arbitrary code by sending a crafted payload to the password reset function. This flaw enables full compromise of the affected system without requiring authentication or user interaction.
Projextor is a malware campaign that leverages Electron-based productivity applications to deliver malicious payloads. The threat disguises itself as legitimate document converters, meal planners, and PDF management tools with working user interfaces. Distribution occurs through impersonating websites that mimic genuine services, using high-ranking search results to lure victims. Applications like Kitchen Canvas, Food Formula, DocConvertWizard, and PDFGrip contain insecure Electron configurations that enable dynamic JavaScript execution and desktop capture capabilities. The infection chain begins with NSIS, Squirrel, or Inno Setup installers that download the main Electron application. Preload scripts abuse privileged Node.js APIs with intentionally disabled security features, allowing arbitrary code execution and screen monitoring. This enables threat actors to capture sensitive information, monitor user activity, and execute remote commands while maintaining the appearance of functional productivity soft...
CVE-2026-50773 is a vulnerability in CGM Germany's CompuGroup Medical CGM ISIS MED version 2510.1.0.20 that allows a remote attacker to execute arbitrary code by leveraging an uncontrolled search path element via a crafted DLL file.
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock() When ntfs_map_runlist_nolock() needs to look up the attribute extent containing a target VCN (ctx_needs_reset == true), it calls ntfs_attr_lookup() and then expects the result to be a non-resident attribute, since only non-resident attributes have a mapping pairs array to decompress. A crafted NTFS image can place a resident attribute where a non-resident one is expected, causing ntfs_attr_lookup() to succeed but return a resident attribute record. Previously this was caught only by a WARN_ON(), which does not stop execution. The code then falls through to read a->data.non_resident.highest_vcn from what is actually a resident attribute, accessing the wrong union member and corrupting the VCN range check. The caller path triggering this warning during mount is: ntfs_map_runlist_nolock ntfs_empty_logfile load_system_files ntfs_fill_super In this path ctx is NULL, so ntfs_map_runlist_nolock() allocates a temporary search context internally and sets ctx_needs_reset = true. The existing resident-attribute guard in the ctx != NULL branch already returns -EIO silently for the same condition; make the ctx_needs_reset path consistent by replacing the WARN_ON() with the same -EIO error return. This causes the crafted image to be rejected with a mount error instead of triggering a kernel warning.