https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 20 Aug 2026 21:39:20 +0000 https://vulnerability.circl.lu/sighting/6312b6c0-94f8-4a46-9843-f3e04e56bdee/export {"uuid": "6312b6c0-94f8-4a46-9843-f3e04e56bdee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtjizs5v6j2h", "content": "CVE-2026-76404 is trending. Hype score 4, currently #10 on cvemon.\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-76404", "creation_timestamp": "2026-08-20T14:58:09.767408Z"} {"uuid": "6312b6c0-94f8-4a46-9843-f3e04e56bdee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtjizs5v6j2h", "content": "CVE-2026-76404 is trending. Hype score 4, currently #10 on cvemon.\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-76404", "creation_timestamp": "2026-08-20T14:58:09.767408Z"} https://vulnerability.circl.lu/sighting/6312b6c0-94f8-4a46-9843-f3e04e56bdee/export Thu, 20 Aug 2026 14:58:09 +0000 https://vulnerability.circl.lu/sighting/4011b141-ec13-4a5e-98b5-28f1bf6ca4b0/export {"uuid": "4011b141-ec13-4a5e-98b5-28f1bf6ca4b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtijf2aax32b", "content": "Splunk patches CVE-2026-76404, a critical remote code execution flaw in the MCP Server app, plus 16 more bugs across its apps and add-ons.\n\n#Splunk #CVE #RemoteCodeExecution #RCE #MCPServer #Deserialization #InfoSec #PatchNow", "creation_timestamp": "2026-08-20T05:31:48.056825Z"} {"uuid": "4011b141-ec13-4a5e-98b5-28f1bf6ca4b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtijf2aax32b", "content": "Splunk patches CVE-2026-76404, a critical remote code execution flaw in the MCP Server app, plus 16 more bugs across its apps and add-ons.\n\n#Splunk #CVE #RemoteCodeExecution #RCE #MCPServer #Deserialization #InfoSec #PatchNow", "creation_timestamp": "2026-08-20T05:31:48.056825Z"} https://vulnerability.circl.lu/sighting/4011b141-ec13-4a5e-98b5-28f1bf6ca4b0/export Thu, 20 Aug 2026 05:31:48 +0000 https://vulnerability.circl.lu/sighting/b24363eb-bb3c-4a7c-b737-0654b5e6d2eb/export {"uuid": "b24363eb-bb3c-4a7c-b737-0654b5e6d2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrrs56e24", "content": "Daily IT Security Digest \u2014 2026-08-20\nCVE-2026-76404 (CRITICAL, CVSS 9.1)\n\nA critical vulnerability in Splunk's Model Context Protocol server app allows insecure deserialization that lets admin users run arbitrary OS commands. While limited to admin users, any compromise of admin credentials could", "creation_timestamp": "2026-08-20T05:03:07.628419Z"} {"uuid": "b24363eb-bb3c-4a7c-b737-0654b5e6d2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrrs56e24", "content": "Daily IT Security Digest \u2014 2026-08-20\nCVE-2026-76404 (CRITICAL, CVSS 9.1)\n\nA critical vulnerability in Splunk's Model Context Protocol server app allows insecure deserialization that lets admin users run arbitrary OS commands. While limited to admin users, any compromise of admin credentials could", "creation_timestamp": "2026-08-20T05:03:07.628419Z"} https://vulnerability.circl.lu/sighting/b24363eb-bb3c-4a7c-b737-0654b5e6d2eb/export Thu, 20 Aug 2026 05:03:07 +0000 https://vulnerability.circl.lu/sighting/47fdfaf8-869a-45fe-9290-5b782695cd6e/export {"uuid": "47fdfaf8-869a-45fe-9290-5b782695cd6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76404", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtiawh7eli2n", "content": "CVE-2026-76404: Splunk MCP Server v1.2 (CRITICAL) enables admin users to run arbitrary OS commands due to unsafe deserialization. Restrict admin roles & monitor activity. Patch status unknown. https://radar.offseq.com/threat/cve-2026-76404-the-application-deserializes-untrusted-data-without-suffi...", "creation_timestamp": "2026-08-20T03:00:29.148002Z"} {"uuid": "47fdfaf8-869a-45fe-9290-5b782695cd6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76404", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtiawh7eli2n", "content": "CVE-2026-76404: Splunk MCP Server v1.2 (CRITICAL) enables admin users to run arbitrary OS commands due to unsafe deserialization. Restrict admin roles & monitor activity. Patch status unknown. https://radar.offseq.com/threat/cve-2026-76404-the-application-deserializes-untrusted-data-without-suffi...", "creation_timestamp": "2026-08-20T03:00:29.148002Z"} https://vulnerability.circl.lu/sighting/47fdfaf8-869a-45fe-9290-5b782695cd6e/export Thu, 20 Aug 2026 03:00:29 +0000 https://vulnerability.circl.lu/sighting/4fd1aa7b-c36d-495a-887d-11152f20c03d/export {"uuid": "4fd1aa7b-c36d-495a-887d-11152f20c03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76404", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117125600108651443", "content": "Splunk MCP Server app v1.2 is impacted by CVE-2026-76404 (CRITICAL, CVSS 9.1) \u2014 insecure deserialization lets admin users run arbitrary OS commands. Limit admin access & monitor for misuse until a patch is released. https://radar.offseq.com/threat/cve-2026-76404-the-application-deserializes-untrusted-data-without-sufficiently-verifying-that-the-a0d42d963a9e6a80 #OffSeq #Splunk #Infosec #CVE202676404", "creation_timestamp": "2026-08-20T03:00:26.755010Z"} {"uuid": "4fd1aa7b-c36d-495a-887d-11152f20c03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76404", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117125600108651443", "content": "Splunk MCP Server app v1.2 is impacted by CVE-2026-76404 (CRITICAL, CVSS 9.1) \u2014 insecure deserialization lets admin users run arbitrary OS commands. Limit admin access & monitor for misuse until a patch is released. https://radar.offseq.com/threat/cve-2026-76404-the-application-deserializes-untrusted-data-without-sufficiently-verifying-that-the-a0d42d963a9e6a80 #OffSeq #Splunk #Infosec #CVE202676404", "creation_timestamp": "2026-08-20T03:00:26.755010Z"} https://vulnerability.circl.lu/sighting/4fd1aa7b-c36d-495a-887d-11152f20c03d/export Thu, 20 Aug 2026 03:00:26 +0000 https://vulnerability.circl.lu/sighting/b78289b1-cf69-454a-ac39-0157842c7675/export {"uuid": "b78289b1-cf69-454a-ac39-0157842c7675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtiavsq55r2y", "content": "CVE-2026-76404 - splunk mcp server app\nThe Splunk MCP Server app, used for managing credentials, has a security flaw that could allow an administrator to execute unauthorized commands on the server. This is a concern\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#splunk #CVE #infosec", "creation_timestamp": "2026-08-20T03:00:06.501443Z"} {"uuid": "b78289b1-cf69-454a-ac39-0157842c7675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtiavsq55r2y", "content": "CVE-2026-76404 - splunk mcp server app\nThe Splunk MCP Server app, used for managing credentials, has a security flaw that could allow an administrator to execute unauthorized commands on the server. This is a concern\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#splunk #CVE #infosec", "creation_timestamp": "2026-08-20T03:00:06.501443Z"} https://vulnerability.circl.lu/sighting/b78289b1-cf69-454a-ac39-0157842c7675/export Thu, 20 Aug 2026 03:00:06 +0000 https://vulnerability.circl.lu/sighting/12e03d0f-171f-4b53-91b1-5a230c60576c/export {"uuid": "12e03d0f-171f-4b53-91b1-5a230c60576c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthxfqi6lq2t", "content": "\ud83d\udea8 CVE-2026-76404 \u2014 CVSS 9.1 CRITICAL\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could execute arbit...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76404\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T00:10:04.354266Z"} {"uuid": "12e03d0f-171f-4b53-91b1-5a230c60576c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthxfqi6lq2t", "content": "\ud83d\udea8 CVE-2026-76404 \u2014 CVSS 9.1 CRITICAL\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could execute arbit...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76404\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T00:10:04.354266Z"} https://vulnerability.circl.lu/sighting/12e03d0f-171f-4b53-91b1-5a230c60576c/export Thu, 20 Aug 2026 00:10:04 +0000 https://vulnerability.circl.lu/sighting/861252e0-82cf-47d2-9002-a4a56696cd5d/export {"uuid": "861252e0-82cf-47d2-9002-a4a56696cd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjphemr2m", "content": "\ud83d\udd34 CVE-2026-76404 - Critical (9.1)\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could exe...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76404/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T23:00:43.175545Z"} {"uuid": "861252e0-82cf-47d2-9002-a4a56696cd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjphemr2m", "content": "\ud83d\udd34 CVE-2026-76404 - Critical (9.1)\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could exe...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76404/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T23:00:43.175545Z"} https://vulnerability.circl.lu/sighting/861252e0-82cf-47d2-9002-a4a56696cd5d/export Wed, 19 Aug 2026 23:00:43 +0000