Skip to main content
Threat Radar animated logo

Threats Tagged 'cve-2026-76321'

View all threats tagged with 'cve-2026-76321'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Tag: cve-2026-76321

Threats Tagged 'cve-2026-76321'

Click on any threat for detailed analysis and mitigation recommendations

Kwetsbaarheden verholpen in Splunk Enterprise door SplunkCVE-2026-76251
0

Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise, specifiek in versies vóór 10.4.2, 10.2.6, 10.0.9 en 9.4.14.

HighVulnerability#gcve#osv#ghsa-3pfp-cpmw-f74j
Join the discussion
CVE-2026-76321: The software constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. in Splunk Splunk EnterpriseCVE-2026-76321
0

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could inject arbitrary Search Processing Language (SPL) into requests that search for events near a selected event. This could allow for unauthorized search execution. The vulnerability is possible because Splunk Web does not consistently escape caller-supplied values when it builds SPL for nearby-event searches, and embedded report access accepts those requests without the expected authorization check. For more information see Use time to find nearby events (https://help.splunk.com/en/splunk-enterprise/search/search-manual/10.2/specify-time-ranges/use-time-to-find-nearby-events) in the Splunk documentation.

HighVulnerability#gcve#osv#ghsa-9c88-8r2m-69jp
Join the discussion
CVE-2026-76321: The software constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. in Splunk Splunk EnterpriseCVE-2026-76321
0

CVE-2026-76321 is a command injection vulnerability in Splunk Enterprise versions prior to 10.4.2, 10.2.6, 10.0.9, and 9.4.14. It allows unauthenticated users to inject arbitrary Search Processing Language (SPL) into nearby-event search requests due to improper escaping of user-supplied input and missing authorization checks in embedded report access.

HighVulnerability#cve#cve-2026-76321
Join the discussion

Showing 1 to 3 of 3 results

Filters:Tag: cve-2026-76321
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses