Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| GitLab | CVE-2026-105777 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have retrieved sensitive internal server credentials due to improper filtering of internal… |
6,5 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| GitLab | CVE-2026-110264 An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to… |
10,0 | 1,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| GitLab | CVE-2026-112212 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have poisoned a shared cache's OAuth/OIDC discovery document to redirect certain flows to an… |
7,5 | 0,19 % | Brak wpisu w KEV nie wyklucza ataków | |
| GitLab | CVE-2026-112326 GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with read-only permissions to permanently delete existing vulnerability records due to… |
3,1 | 0,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76530 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
8,8 | 0,29 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76531 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
9,9 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Archer C6 V2 | CVE-2026-89052 A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker who obtains an encrypted configuration file or other protected credential data can recover plaintext credentials. Successful exploitation… |
5,9 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76308 In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition through the Representational State Transfer (REST) API and cause Splunk SOAR to apply the license change. The vulnerability is possible because Splunk SOAR authenticates requests to manage the… |
6,5 | 0,17 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76406 In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected Splunk SOAR instance could submit Basic authentication data to the Representational State Transfer (REST) API to expose and decrypt that encrypted credential data. The… |
5,9 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76407 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
9,8 | 0,43 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76408 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
9,8 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76526 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
8,8 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76527 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
9,8 | 0,43 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76528 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
9,8 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76529 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
9,8 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk Enterprise | CVE-2026-76300 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
8,8 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk Enterprise | CVE-2026-76301 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
9,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk Enterprise | CVE-2026-76302 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
9,9 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76303 In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store attacker-controlled content that Splunk SOAR displays in app documentation by installing an app. If another user who holds a role with permission to view apps opens the app documentation,… |
4,8 | 0,18 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76304 In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Automation Brokers could download the Splunk SOAR Automation Broker Docker Compose configuration file. The file contains the Uniform Resource Locator (URL) of the Splunk SOAR instance, the… |
4,3 | 0,16 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76305 In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view apps could download an archive of an installed app. This could expose all data in the app archive, including proprietary source code and sensitive information. The vulnerability is possible… |
6,5 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76306 In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the Representational State Transfer (REST) API to infer password hashes and authorization tokens for other users. The information disclosure is possible because Splunk SOAR applies REST API query… |
7,5 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76307 In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could use the Representational State Transfer (REST) API to infer authentication token values for other users. If the inferred token grants administrative access, that user could gain… |
7,2 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk Enterprise / Splunk Secure Gateway | CVE-2026-76292 In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a low-privileged user that does not hold the "admin" Splunk role or the "sc_admin" Splunk Secure Gateway role could read mobile alert notification data for… |
6,5 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk Enterprise | CVE-2026-76293 In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_xml capability could execute arbitrary operating-system commands using the permissions of the user account running Splunk Enterprise by opening the affected configuration in the… |
7,2 | 0,47 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.