https://vulnerability.circl.lu/sightings/feed 2026-08-20T21:39:21.090435+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6312b6c0-94f8-4a46-9843-f3e04e56bdee/export 2026-08-20T21:39:21.117108+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6312b6c0-94f8-4a46-9843-f3e04e56bdee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtjizs5v6j2h", "content": "CVE-2026-76404 is trending. Hype score 4, currently #10 on cvemon.\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-76404", "creation_timestamp": "2026-08-20T14:58:09.767408Z"} 2026-08-20T14:58:09.767408+00:00 https://vulnerability.circl.lu/sighting/4011b141-ec13-4a5e-98b5-28f1bf6ca4b0/export 2026-08-20T21:39:21.120398+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4011b141-ec13-4a5e-98b5-28f1bf6ca4b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtijf2aax32b", "content": "Splunk patches CVE-2026-76404, a critical remote code execution flaw in the MCP Server app, plus 16 more bugs across its apps and add-ons.\n\n#Splunk #CVE #RemoteCodeExecution #RCE #MCPServer #Deserialization #InfoSec #PatchNow", "creation_timestamp": "2026-08-20T05:31:48.056825Z"} 2026-08-20T05:31:48.056825+00:00 https://vulnerability.circl.lu/sighting/b24363eb-bb3c-4a7c-b737-0654b5e6d2eb/export 2026-08-20T21:39:21.120534+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b24363eb-bb3c-4a7c-b737-0654b5e6d2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrrs56e24", "content": "Daily IT Security Digest \u2014 2026-08-20\nCVE-2026-76404 (CRITICAL, CVSS 9.1)\n\nA critical vulnerability in Splunk's Model Context Protocol server app allows insecure deserialization that lets admin users run arbitrary OS commands. While limited to admin users, any compromise of admin credentials could", "creation_timestamp": "2026-08-20T05:03:07.628419Z"} 2026-08-20T05:03:07.628419+00:00 https://vulnerability.circl.lu/sighting/47fdfaf8-869a-45fe-9290-5b782695cd6e/export 2026-08-20T21:39:21.120652+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "47fdfaf8-869a-45fe-9290-5b782695cd6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76404", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtiawh7eli2n", "content": "CVE-2026-76404: Splunk MCP Server v1.2 (CRITICAL) enables admin users to run arbitrary OS commands due to unsafe deserialization. Restrict admin roles & monitor activity. Patch status unknown. https://radar.offseq.com/threat/cve-2026-76404-the-application-deserializes-untrusted-data-without-suffi...", "creation_timestamp": "2026-08-20T03:00:29.148002Z"} 2026-08-20T03:00:29.148002+00:00 https://vulnerability.circl.lu/sighting/4fd1aa7b-c36d-495a-887d-11152f20c03d/export 2026-08-20T21:39:21.120753+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4fd1aa7b-c36d-495a-887d-11152f20c03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76404", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117125600108651443", "content": "Splunk MCP Server app v1.2 is impacted by CVE-2026-76404 (CRITICAL, CVSS 9.1) \u2014 insecure deserialization lets admin users run arbitrary OS commands. Limit admin access & monitor for misuse until a patch is released. https://radar.offseq.com/threat/cve-2026-76404-the-application-deserializes-untrusted-data-without-sufficiently-verifying-that-the-a0d42d963a9e6a80 #OffSeq #Splunk #Infosec #CVE202676404", "creation_timestamp": "2026-08-20T03:00:26.755010Z"} 2026-08-20T03:00:26.755010+00:00 https://vulnerability.circl.lu/sighting/b78289b1-cf69-454a-ac39-0157842c7675/export 2026-08-20T21:39:21.120859+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b78289b1-cf69-454a-ac39-0157842c7675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtiavsq55r2y", "content": "CVE-2026-76404 - splunk mcp server app\nThe Splunk MCP Server app, used for managing credentials, has a security flaw that could allow an administrator to execute unauthorized commands on the server. This is a concern\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#splunk #CVE #infosec", "creation_timestamp": "2026-08-20T03:00:06.501443Z"} 2026-08-20T03:00:06.501443+00:00 https://vulnerability.circl.lu/sighting/12e03d0f-171f-4b53-91b1-5a230c60576c/export 2026-08-20T21:39:21.120959+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "12e03d0f-171f-4b53-91b1-5a230c60576c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthxfqi6lq2t", "content": "\ud83d\udea8 CVE-2026-76404 \u2014 CVSS 9.1 CRITICAL\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could execute arbit...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76404\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T00:10:04.354266Z"} 2026-08-20T00:10:04.354266+00:00 https://vulnerability.circl.lu/sighting/861252e0-82cf-47d2-9002-a4a56696cd5d/export 2026-08-20T21:39:21.121059+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "861252e0-82cf-47d2-9002-a4a56696cd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjphemr2m", "content": "\ud83d\udd34 CVE-2026-76404 - Critical (9.1)\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could exe...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76404/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T23:00:43.175545Z"} 2026-08-19T23:00:43.175545+00:00