CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-76526Improper Neutralization in Splunk SOARSplunk SOAR
- CVE-2026-76408Improper Control of a Resource Through its Lifetime in Splunk SOARSplunk SOAR
- CVE-2026-76407Improper Access Control in Splunk SOARSplunk SOAR
- CVE-2026-76406Information Disclosure through REST API Authentication in Splunk SOARSplunk SOAR
- CVE-2026-76308Missing Authorization through the REST API in Splunk SOARSplunk SOAR
- CVE-2026-76307Sensitive Information Disclosure through REST API Query Filters in Splunk SOARSplunk SOAR
- CVE-2026-76306Information Disclosure through REST API Query Filters in Splunk SOARSplunk SOAR
- CVE-2026-76305Improper Access Control during App Downloads in Splunk SOARSplunk SOAR
- CVE-2026-76304Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOARSplunk SOAR
- CVE-2026-76303Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOARSplunk SOAR
- CVE-2026-76302Security Hardening in Splunk Enterprise - October 2026Splunk Enterprise
- CVE-2026-76301Splunk Enterprise protection mechanism failure in security controlsSplunk Enterprise
- CVE-2026-76300Security Hardening in Splunk Enterprise - October 2026Splunk Enterprise
- CVE-2026-76299Security Hardening in Splunk Enterprise - October 2026Splunk Enterprise
- CVE-2026-76298Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76297Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk EnterpriseSplunk Enterprise
- CVE-2026-76296Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk EnterpriseSplunk Enterprise
- CVE-2026-76295SPL Injection through the REST API in Splunk Secure GatewaySplunk Enterprise · Splunk Secure Gateway
- CVE-2026-76294Improper Access Control in Field Extraction Management in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76293Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76292Missing Authorization through REST API Endpoints in Splunk Secure GatewaySplunk Enterprise · Splunk Secure Gateway
- CVE-2026-76291Improper Access Control through Scheduled Search Safeguards in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76290Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76289Denial of Service (DoS) through the REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76288Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk EnterpriseSplunk Enterprise
- CVE-2026-76287Authorization Bypass in the Data Management REST API in Splunk EnterpriseSplunk Enterprise
- CVE-2026-114441oretnom23 php-travel-agency-system update.php sql injectionoretnom23 php-travel-agency-system
- CVE-2026-89052TP-Link Archer C6 credential exposure via hardcoded AES keyTP-Link Systems Archer C6
- CVE-2026-114440oretnom23 php-travel-agency-system delete.php sql injectionoretnom23 php-travel-agency-system
- CVE-2026-103090Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM)Google SAM