CVEs published in August 2026
1,356 tracked CVEs from 28 vendors had their first vendor advisory published in August 2026: 189 critical, 821 high, 11 in CISA KEV. Newest first.
2,700 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-76375Medium
Information Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76374Medium
Information Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76373Medium
Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76370Medium
Information Disclosure through the REST API in Splunk SOAR
Splunk · 1 advisory - Added
Path Traversal through Automation Broker in Splunk SOAR
Splunk · 1 advisory - Added
Missing Authorization through Playbooks in Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76367Medium
Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76366Medium
Information Disclosure through the REST API in Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76365Medium
Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76364Medium
Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76363Medium
Structured Query Language Injection through the REST API in Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76362High
Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR
Splunk · 1 advisory - Added
Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76360Medium
Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76359Medium
Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76358Medium
Path Traversal through App Installation Tar Extraction in Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76357High
Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76356High
Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR
Splunk · 1 advisory - Added
CVE-2026-76355High
Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76354High
Path Traversal through Search Head Clustering in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76353Medium
Path Traversal through Knowledge Bundle Replication in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76352High
Improper Authorization through the REST API in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76351High
Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway
Splunk · 1 advisory - Added
CVE-2026-76350High
Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76349Medium
SPL Injection through Splunk Web Form Tokens in Splunk Enterprise
Splunk · 1 advisory - Added
Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76347Medium
Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway
Splunk · 1 advisory - Added
CVE-2026-76346Medium
Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76345Medium
Remote Code Execution (RCE) through the REST API in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76344High
Path Traversal through the Search Dispatch REST API in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76343Medium
Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76342Medium
Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76341Medium
Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76340Medium
Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76339Medium
SPL Injection through the geostats Command in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76338High
Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76337Medium
Path Traversal through Splunk Web Static File Serving in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76336High
Improper Access Control through the REST API in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76335High
Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76334Medium
SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76333High
Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76332High
SPL Injection through Splunk Web in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76331High
SPL Injection through the REST API in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76330High
SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76329Medium
SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76328Medium
SPL Injection through Splunk Web in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76327Medium
SPL Injection through Splunk Web in Splunk Secure Gateway
Splunk · 1 advisory - Added
CVE-2026-76326Medium
Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76325High
Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76324Medium
Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76323Medium
SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76322Medium
SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76321High
SPL Injection through Nearby Event Searches in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76320Medium
SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76319High
Remote Code Execution (RCE) through Federated Search in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76318Medium
Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76317High
Path Traversal through the Lookup Configuration REST API in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76316High
Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76315High
Code Injection through Splunk Web Manager Configuration in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76314High
Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76313High
Remote Code Execution (RCE) through the REST API in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76312Critical
Improper Access Control through Embedded Reports in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76311Critical
Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76310Critical
Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76309Medium
Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76263Medium
Improper Access Control through the REST API in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76262High
Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76261Medium
Insecure Default Access Control List through the REST API in Splunk Secure Gateway
Splunk · 1 advisory - Added
CVE-2026-76260Medium
Incorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76259High
Improper Privilege Management on the Management Port in Splunk Enterprise for Windows
Splunk · 1 advisory - Added
CVE-2026-76258Medium
Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway
Splunk · 1 advisory - Added
CVE-2026-76257Medium
Missing Authorization through REST API Endpoints in Splunk Secure Gateway
Splunk · 1 advisory - Added
CVE-2026-76256Medium
Information Exposure through REST API Endpoints in Splunk Secure Gateway
Splunk · 1 advisory - Added
CVE-2026-76255Medium
Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76254High
SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76253High
Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76252Medium
Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise
Splunk · 1 advisory - Added
CVE-2026-76251High
Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud
Splunk · 1 advisory - Added
CVE-2026-67189Medium
pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink in the administrator interface
pfSense · 1 advisory - Added
CVE-2026-19490CriticalCISA KEV
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
NetScaler · 1 advisory - Added
CVE-2026-19489High
Vulnerability in NetScaler ADC and NetScaler Gateway
NetScaler · 1 advisory - Added
CVE-2026-6638Critical
Splunk · 2 advisories - Added
CVE-2026-6637Critical
Splunk · 2 advisories - Added
CVE-2026-6479Critical
Splunk · 2 advisories - Added
CVE-2026-45409Critical
Splunk · 2 advisories - Added
CVE-2026-44244Critical
Splunk · 1 advisory - Added
CVE-2026-44243Critical
Splunk · 1 advisory - Added
CVE-2026-42284Critical
Splunk · 1 advisory - Added
CVE-2026-42215Critical
Splunk · 1 advisory - Added
CVE-2026-41066Critical
Splunk · 1 advisory - Added
CVE-2026-40087Critical
Splunk · 1 advisory - Added
CVE-2026-34525Critical
Splunk · 1 advisory - Added
CVE-2026-34520Critical
Splunk · 1 advisory - Added
CVE-2026-34519Critical
Splunk · 1 advisory - Added
CVE-2026-34518Critical
Splunk · 1 advisory - Added
CVE-2026-34517Critical
Splunk · 1 advisory - Added
CVE-2026-34516Critical
Splunk · 1 advisory - Added
CVE-2026-34515Critical
Splunk · 1 advisory - Added
CVE-2026-34514Critical
Splunk · 1 advisory - Added
CVE-2026-34513Critical
Splunk · 1 advisory