{"uuid": "3e0f3d9d-a8b9-4eaa-9150-b2c7d39ad0b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32158", "type": "seen", "source": "https://t.me/cissp/6016", "content": "\u2069 Certain versions of Splunk from Splunk contain the following vulnerability:\nSplunk Enterprise deployment servers in versions before 8.1.10.1, 8.2.6.1, and 9.0 let clients deploy forwarder bundles to other deployment clients through the deployment server. An attacker that compromised a Universal Forwarder endpoint could use the vulnerability to execute arbitrary code on all other Universal Forwarder endpoints subscribed to the deployment server.\nhttps://cve.report/CVE-2022-32158", "creation_timestamp": "2026-09-02T01:04:08.989428Z"}