[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-96366 | 22 Oct 2026 | CVSS 5.3 | Drupal WebformIncorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from… | |
| CVE-2026-96367 | 22 Oct 2026 | CVSS 4.6 | Drupal WebformPrivilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12… | |
| CVE-2026-87953 | 22 Oct 2026 | CVSS 3.3 | Drupal SAML SSO - Service ProviderServer-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forgery. This issue affects SAML… | |
| CVE-2026-87954 | 22 Oct 2026 | CVSS 4.3 | Drupal Taxonomy Term GlossaryMissing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxonomy Term Glossary versions… | |
| CVE-2026-87955 | 22 Oct 2026 | CVSS 4.3 | Drupal Ultimate Table FieldMissing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This issue affects Ultimate Table Field versions: from… | |
| CVE-2026-96355 | 22 Oct 2026 | CVSS 9.1 | Drupal WebformImproper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Injection. This issue affects… | |
| CVE-2026-96356 | 22 Oct 2026 | CVSS 5.3 | Drupal WebformIncorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from… | |
| CVE-2026-96357 | 22 Oct 2026 | CVSS 4.6 | Drupal WebformImproper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue… | |
| CVE-2026-96358 | 22 Oct 2026 | CVSS 4.6 | Drupal WebformImproper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting… | |
| CVE-2026-96359 | 22 Oct 2026 | CVSS 4.6 | Drupal WebformImproper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting… | |
| CVE-2026-87945 | 22 Oct 2026 | CVSS 5.4 | Drupal SAML SSO - Service ProviderURL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the Source of Data. This issue… | |
| CVE-2026-87946 | 22 Oct 2026 | CVSS 4.8 | Drupal SAML SSO - Service ProviderObservable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affects SAML SSO - Service Provider… | |
| CVE-2026-87947 | 22 Oct 2026 | CVSS 4.8 | Drupal SAML SSO - Service ProviderImproper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider allows Signature Spoof. This issue affects SAML… | |
| CVE-2026-87948 | 22 Oct 2026 | CVSS 3.5 | Drupal SAML SSO - Service ProviderImproper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows… | |
| CVE-2026-87949 | 22 Oct 2026 | CVSS 3.3 | Drupal SAML SSO - Service ProviderImproper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows… | |
| CVE-2026-87950 | 22 Oct 2026 | CVSS 5.3 | Drupal SAML SSO - Service ProviderUse of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML… | |
| CVE-2026-87951 | 22 Oct 2026 | CVSS 3.8 | Drupal SAML SSO - Service ProviderInsecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue… | |
| CVE-2026-87952 | 22 Oct 2026 | CVSS 3.1 | Drupal SAML SSO - Service ProviderAuthentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials. This… | |
| CVE-2026-87936 | 22 Oct 2026 | CVSS 6.5 | Drupal amazee.ai Private AI ProviderImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL… | |
| CVE-2026-87937 | 22 Oct 2026 | CVSS 6.5 | Drupal Central Authentication System (CAS) ServerURL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of… | |
| CVE-2026-87938 | 22 Oct 2026 | Not scored yet | Drupal CSP logImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue… | |
| CVE-2026-87939 | 22 Oct 2026 | CVSS 4.2 | Drupal Feed BlockImproper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Feed Block allows Stored XSS. This issue… | |
| CVE-2026-87940 | 22 Oct 2026 | CVSS 5.4 | Drupal Key authUse of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-87941 | 22 Oct 2026 | Not scored yet | Drupal PatreonVulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x. | |
| CVE-2026-87942 | 22 Oct 2026 | CVSS 4.6 | Drupal SafeDeleteImproper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SafeDelete allows Stored XSS. This issue… | |
| CVE-2026-87943 | 22 Oct 2026 | CVSS 6.5 | Drupal SAML SSO - Service ProviderMissing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing. This issue affects SAML SSO - Service Provider… | |
| CVE-2026-87944 | 22 Oct 2026 | CVSS 4.8 | Drupal SAML SSO - Service ProviderImproper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle (AiTM). This issue affects SAML… | |
| CVE-2026-84916 | 22 Oct 2026 | CVSS 3.7 | Drupal IslandoraMissing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0. | |
| CVE-2026-84917 | 22 Oct 2026 | CVSS 6.5 | Drupal Jsonapi Role AccessIncorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from… | |
| CVE-2026-84918 | 22 Oct 2026 | CVSS 3.7 | Drupal Monobank payment APIImproper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank… | |
| CVE-2026-84919 | 22 Oct 2026 | CVSS 4.6 | Drupal PhotoSwipe - Responsive JavaScript Modal Image GalleryImproper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal… | |
| CVE-2026-84920 | 22 Oct 2026 | CVSS 5.3 | Drupal Unpublished Node PermissionsIncorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affects Unpublished Node… | |
| CVE-2026-84921 | 22 Oct 2026 | CVSS 5.3 | Drupal Webform Submissions DeleteMissing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects Webform Submissions Delete… | |
| CVE-2026-84923 | 22 Oct 2026 | CVSS 6.5 | Drupal Email Verification / SMS Verification / OTP VerificationAuthentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows… | |
| CVE-2026-84924 | 22 Oct 2026 | CVSS 5.4 | Drupal Email Verification / SMS Verification / OTP VerificationImproper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Email Verification / SMS Verification /… | |
| CVE-2026-16648 | 22 Oct 2026 | CVSS 3.8 | Drupal Mailer Plus LogInsertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Stolen Credentials. This issue… | |
| CVE-2026-81163 | 22 Oct 2026 | CVSS 5.4 | Drupal Media Library ImporterImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Importer allows Path Traversal… | |
| CVE-2026-84910 | 22 Oct 2026 | CVSS 4.2 | Drupal Advanced SearchMissing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Search versions: from 0.0.0 to… | |
| CVE-2026-84911 | 22 Oct 2026 | CVSS 3.1 | Drupal AI (Artificial Intelligence)Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows… | |
| CVE-2026-84912 | 22 Oct 2026 | CVSS 4.6 | Drupal AI (Artificial Intelligence)Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence)… | |
| CVE-2026-84913 | 22 Oct 2026 | CVSS 4.6 | Drupal AI TranslateMissing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2… | |
| CVE-2026-84914 | 22 Oct 2026 | CVSS 5.3 | Drupal Calculate Working DaysMissing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions… | |
| CVE-2026-84915 | 22 Oct 2026 | CVSS 4.6 | Drupal Component blocksImproper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Component blocks allows Stored XSS. This… | |
| CVE-2026-114722 | 22 Oct 2026 | CVSS 6.5 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils::mod_css_styles() did not… | |
| CVE-2026-114723 | 22 Oct 2026 | CVSS 3.7 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When… | |
| CVE-2026-114724 | 22 Oct 2026 | CVSS 7.4 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserialize(). A session key prefixed… | |
| CVE-2026-114725 | 22 Oct 2026 | CVSS 5.0 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail stripped newline… | |
| CVE-2026-114726 | 22 Oct 2026 | CVSS 5.8 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce (resend) action… | |
| CVE-2026-114727 | 22 Oct 2026 | CVSS 8.3 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing images. SVG and EPS were… | |
| CVE-2026-114728 | 22 Oct 2026 | CVSS 5.3 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes… | |
| CVE-2026-114716 | 22 Oct 2026 | CVSS 8.5 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail::extract_inline_images()… | |
| CVE-2026-114717 | 22 Oct 2026 | CVSS 4.0 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a message is forwarded as an… | |
| CVE-2026-114718 | 22 Oct 2026 | CVSS 4.7 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password plugin. Error text… | |
| CVE-2026-114719 | 22 Oct 2026 | CVSS 3.7 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the markasjunk plugin… | |
| CVE-2026-114720 | 22 Oct 2026 | CVSS 7.1 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote authenticated attacker can… | |
| CVE-2026-114721 | 22 Oct 2026 | CVSS 3.1 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassed. The check compared only the… | |
| CVE-2026-114660 | 22 Oct 2026 | CVSS 6.3 | getgrav gravGrav from 2.0.0 before 2.2.5 contains an improper access control vulnerability in FlexDirectory::dynamicFlexField() that allows page authors to call… | |
| CVE-2026-114661 | 22 Oct 2026 | CVSS 8.5 | openremoteOpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any authenticated user to start… | |
| CVE-2026-114662 | 22 Oct 2026 | CVSS 8.1 | obot-platform obotObot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that allows unauthenticated attackers to steal API keys by… | |
| CVE-2026-114663 | 22 Oct 2026 | CVSS 8.4 | vyperlang vyperVyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, because parse_Name resolves their… | |
| CVE-2026-114664 | 22 Oct 2026 | CVSS 7.1 | frappeFrappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doctype.event.event.get_events method, which fails to… | |
| CVE-2026-114715 | 22 Oct 2026 | CVSS 6.8 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Modoboa driver of the password… | |
| CVE-2026-114641 | 22 Oct 2026 | CVSS 3.7 | traefikTraefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate) backend authentication, where the… | |
| CVE-2026-114642 | 22 Oct 2026 | CVSS 8.7 | traefikTraefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a client-connection slot not keyed by… | |
| CVE-2026-114656 | 22 Oct 2026 | CVSS 7.5 | traefikTraefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that allows unauthenticated clients to skip client-certificate… | |
| CVE-2026-114657 | 22 Oct 2026 | CVSS 5.7 | getgrav gravGrav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows page authors to capture visitors' HTTP Basic credentials… | |
| CVE-2026-114658 | 22 Oct 2026 | CVSS 8.8 | getgrav grav-plugin-loginGrav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that allows page authors to obtain… | |
| CVE-2026-114659 | 22 Oct 2026 | CVSS 6.5 | getgrav grav-plugin-flex-objectsGrav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic /api/v1/flex-objects/pages API routes check only… | |
| CVE-2026-114635 | 22 Oct 2026 | CVSS 8.7 | traefikTraefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil… | |
| CVE-2026-114636 | 22 Oct 2026 | CVSS 8.7 | traefikTraefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP router generated for… | |
| CVE-2026-114637 | 22 Oct 2026 | CVSS 8.7 | traefikTraefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connection pool, which fails to pin… | |
| CVE-2026-114638 | 22 Oct 2026 | CVSS 8.7 | traefikTraefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider that merges client CAs when… | |
| CVE-2026-114639 | 22 Oct 2026 | CVSS 8.7 | traefikTraefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a first request preauthenticated with an… | |
| CVE-2026-114640 | 22 Oct 2026 | CVSS 8.7 | traefikTraefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider that forwards… | |
| CVE-2026-114576 | 22 Oct 2026 | CVSS 3.7 | Linksys RE6250A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The… | |
| CVE-2026-114577 | 22 Oct 2026 | CVSS 7.3 | oretnom23 php-travel-agency-systemA vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the… | |
| CVE-2026-114633 | 22 Oct 2026 | CVSS 6.5 | WWBN AVideoWWBN AVideo before 29.4.0 contains an incorrect authorization vulnerability that allows delegated Users Admin accounts to delete or modify… | |
| CVE-2026-114634 | 22 Oct 2026 | CVSS 4.3 | WWBN AVideoWWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL() because get_headers() follows… | |
| CVE-2026-12664 | 22 Oct 2026 | CVSS 6.8 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under… | |
| CVE-2026-13319 | 22 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that… | |
| CVE-2026-14288 | 22 Oct 2026 | CVSS 3.1 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under… | |
| CVE-2026-15723 | 22 Oct 2026 | CVSS 8.2 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when… | |
| CVE-2026-16255 | 22 Oct 2026 | CVSS 5.9 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the… | |
| CVE-2026-112378 | 22 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under… | |
| CVE-2026-114574 | 22 Oct 2026 | CVSS 4.3 | massCodeIO massCodeA security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the… | |
| CVE-2026-114575 | 22 Oct 2026 | CVSS 10.0 | TOTOLINK A950RGA flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file… | |
| CVE-2026-114714 | 22 Oct 2026 | CVSS 5.3 | Roundcube WebmailRoundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail_usercopy plugin. With the… | |
| CVE-2026-103515 | 22 Oct 2026 | CVSS 2.7 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an… | |
| CVE-2026-105711 | 22 Oct 2026 | CVSS 3.5 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when… | |
| CVE-2026-105777 | 22 Oct 2026 | CVSS 4.3 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that… | |
| CVE-2026-110264 | 22 Oct 2026 | CVSS 10.0 | Critical Vulnerability in GitLab Community and Enterprise EditionsAn issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before… | |
| CVE-2026-112212 | 22 Oct 2026 | CVSS 7.5 | GitLabGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under… | |
| CVE-2026-112326 | 22 Oct 2026 | CVSS 3.1 | GitLabGitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under… | |
| CVE-2026-76530 | 21 Oct 2026 | CVSS 8.8 | Splunk SOARAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76531 | 21 Oct 2026 | CVSS 9.9 | Splunk SOARAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-89052 | 21 Oct 2026 | CVSS 5.9 | TP-Link Systems Inc. Archer C6 V2A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An… | |
| CVE-2026-76308 | 21 Oct 2026 | CVSS 6.5 | Splunk SOARIn Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition through the Representational State Transfer… | |
| CVE-2026-76406 | 21 Oct 2026 | CVSS 5.9 | Splunk SOARIn Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected Splunk SOAR instance could… | |
| CVE-2026-76407 | 21 Oct 2026 | Not scored yet | Splunk SOARAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… | |
| CVE-2026-76408 | 21 Oct 2026 | Not scored yet | Splunk SOARAs part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This… |
Page 5 of 168