DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Splunk SOAR: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-08-19
Ein Angreifer kann mehrere Schwachstellen in Splunk SOAR ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, und um beliebigen Programmcode auszuführen.
01
beschreibt (102)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-76370US | —OT erhöht | — | ||
In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use the Representational State Transfer (REST) API to view the names and identifiers… | ||||
| CVE-2026-76369US | — | — | ||
In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possible b… | ||||
| CVE-2026-76368US | —OT erhöht | — | ||
In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permission could view metadata about a playbook repository that they are not authorize… | ||||
| CVE-2026-76367US | medium4.0 | — | ||
In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript in a note and run it in the browser of another user when that… | ||||
| CVE-2026-76366US | — | — | ||
In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer (REST) API filtering on playbook runs to recover session toke… | ||||
| CVE-2026-76365US | — | — | ||
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language (SQL) statements against the Splunk S… | ||||
| CVE-2026-76364US | — | — | ||
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language (SQL) statements against the Splunk S… | ||||
| CVE-2026-76363US | — | — | ||
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Query Language (SQL) statements against the Splunk SOAR database… | ||||
| CVE-2026-76362US | — | — | ||
In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffic between Splunk SOAR and a configured CyberArk Representational State Transfer… | ||||
| CVE-2026-76361US | — | — | ||
In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../check_connectivity endpoint to make Splunk SOAR initiate outb… | ||||
| CVE-2026-76360US | —OT erhöht | — | ||
In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could use the /rest/health endpoint to gather system and cluster telemetry that should be restricte… | ||||
| CVE-2026-76359US | — | — | ||
In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversal in the Universal Forwarder installer's archive extraction to write files outsi… | ||||
| CVE-2026-76358US | — | — | ||
In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal during app installation to write files outside the intended temporary directory. Th… | ||||
| CVE-2026-76357US | — | — | ||
In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the Representational State Transfer (REST) API and execute arbi… | ||||
| CVE-2026-76356US | — | — | ||
In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification endpoint and execute arbitr… | ||||
| CVE-2026-9256US | — | Exploit | ||
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct,… | ||||
| CVE-2026-42946US | high7.4 | — | ||
A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data. When scgi_pass or uwsgi… | ||||
| CVE-2026-42945US | — | Exploit | ||
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or s… | ||||
| CVE-2026-42934US | — | — | ||
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When charset, source_charset, and charset_map and proxy_pass with disabled buffering ("… | ||||
| CVE-2026-40701US | — | Exploit | ||
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp directiv… | ||||
20 von 102 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Red Hat Security Advisory RHSA-2026:59153 vom 2026-10-02external
- Red Hat Security Advisory RHSA-2026:63385 vom 2026-09-04external
- Red Hat Security Advisory RHSA-2026:71179 vom 2026-09-24external
- Red Hat Security Advisory RHSA-2026:71210 vom 2026-09-24external
- SVD-2026-0804: Security Hardening Release for Splunk SOAR - August 2026 vom 2026-08-19external
- SVD-2026-0805: Third-Party Package Updates in Splunk SOAR - August 2026 vom 2026-08-19external
- WID-SEC-W-2026-2933 - CSAF Versionself
- WID-SEC-2026-2933 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan