{"vulnerability": "cve-2026-7640", "sightings": [{"uuid": "b24363eb-bb3c-4a7c-b737-0654b5e6d2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrrs56e24", "content": "Daily IT Security Digest \u2014 2026-08-20\nCVE-2026-76404 (CRITICAL, CVSS 9.1)\n\nA critical vulnerability in Splunk's Model Context Protocol server app allows insecure deserialization that lets admin users run arbitrary OS commands. While limited to admin users, any compromise of admin credentials could", "creation_timestamp": "2026-08-20T05:03:07.628419Z"}, {"uuid": "4011b141-ec13-4a5e-98b5-28f1bf6ca4b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtijf2aax32b", "content": "Splunk patches CVE-2026-76404, a critical remote code execution flaw in the MCP Server app, plus 16 more bugs across its apps and add-ons.\n\n#Splunk #CVE #RemoteCodeExecution #RCE #MCPServer #Deserialization #InfoSec #PatchNow", "creation_timestamp": "2026-08-20T05:31:48.056825Z"}, {"uuid": "93964811-bbf9-4c8a-891b-57648ea14162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtkku5t4y727", "content": "Splunk\u306eMCP Server\u30a2\u30d7\u30ea\u306b\u6df1\u523b\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\uff08CVE-2026-76404\u3001CVSS 9.1\uff09\u304c\u767a\u899a\n\nCVE-2026-76404: Critical Remote Code Execution Hits Splunk MCP Server App (CVSS 9.1)\u3000#DailyCyberSecurity (Aug 20)\n\nsecurityonline.info/splunk-apps-...", "creation_timestamp": "2026-08-21T01:03:28.092029Z"}, {"uuid": "8008f038-fdd9-47ca-baf5-e1e372cc059a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtkqogn7uj2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-65400: 28 interactions\nCVE-2026-59310: 25 interactions\nCVE-2026-43499: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-19490: 8 interactions\nCVE-2026-76404: 8 interactions\nCVE-2026-63030: 7 interactions\n", "creation_timestamp": "2026-08-21T02:47:38.506939Z"}, {"uuid": "b5baa024-0517-4162-958d-5182a5f4e377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtnps7cets2f", "content": "Critical CVE-2026-76404 patched: Splunk MCP Server RCE + 16 flaws fixed \u2014 update now, especially AI Toolkit and Kafka apps. #Splunk #Cybersecurity #RCE #AIsecurity #Vulnerabilities https://thedailytechfeed.com/splunk-urgent-patch-released-critical-rce-in-mcp-server-16-other-flaws/", "creation_timestamp": "2026-08-22T07:09:51.721433Z"}, {"uuid": "6312b6c0-94f8-4a46-9843-f3e04e56bdee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtjizs5v6j2h", "content": "CVE-2026-76404 is trending. Hype score 4, currently #10 on cvemon.\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-76404", "creation_timestamp": "2026-08-20T14:58:09.767408Z"}, {"uuid": "861252e0-82cf-47d2-9002-a4a56696cd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjphemr2m", "content": "\ud83d\udd34 CVE-2026-76404 - Critical (9.1)\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could exe...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76404/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T23:00:43.175545Z"}, {"uuid": "12e03d0f-171f-4b53-91b1-5a230c60576c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthxfqi6lq2t", "content": "\ud83d\udea8 CVE-2026-76404 \u2014 CVSS 9.1 CRITICAL\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could execute arbit...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76404\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T00:10:04.354266Z"}, {"uuid": "b78289b1-cf69-454a-ac39-0157842c7675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtiavsq55r2y", "content": "CVE-2026-76404 - splunk mcp server app\nThe Splunk MCP Server app, used for managing credentials, has a security flaw that could allow an administrator to execute unauthorized commands on the server. This is a concern\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#splunk #CVE #infosec", "creation_timestamp": "2026-08-20T03:00:06.501443Z"}, {"uuid": "a9cc6d3c-1545-4f56-b2a1-b1ccf66c9dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7640", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqljtphk2b2t", "content": "CVE-2026-7640 - WP Customer Area\nCVE ID : CVE-2026-7640\n \n Published : July 14, 2026, 2:16 a.m. | 2\u00a0hours, 58\u00a0minutes ago\n \n Description : The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute of the `customer-area-prot...", "creation_timestamp": "2026-07-14T06:02:23.943846Z"}, {"uuid": "4fd1aa7b-c36d-495a-887d-11152f20c03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76404", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117125600108651443", "content": "Splunk MCP Server app v1.2 is impacted by CVE-2026-76404 (CRITICAL, CVSS 9.1) \u2014 insecure deserialization lets admin users run arbitrary OS commands. Limit admin access & monitor for misuse until a patch is released. https://radar.offseq.com/threat/cve-2026-76404-the-application-deserializes-untrusted-data-without-sufficiently-verifying-that-the-a0d42d963a9e6a80 #OffSeq #Splunk #Infosec #CVE202676404", "creation_timestamp": "2026-08-20T03:00:26.755010Z"}, {"uuid": "47fdfaf8-869a-45fe-9290-5b782695cd6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76404", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtiawh7eli2n", "content": "CVE-2026-76404: Splunk MCP Server v1.2 (CRITICAL) enables admin users to run arbitrary OS commands due to unsafe deserialization. Restrict admin roles & monitor activity. Patch status unknown. https://radar.offseq.com/threat/cve-2026-76404-the-application-deserializes-untrusted-data-without-suffi...", "creation_timestamp": "2026-08-20T03:00:29.148002Z"}, {"uuid": "989e8964-4fc3-4a9b-aba4-cf048f9602be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtweamb35w2b", "content": "\ud83d\udccc CVE-2026-76404 - In Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could execute arbitrary commands on the underlying operating s... https://www.cyberhub.blog/cves/CVE-2026-76404", "creation_timestamp": "2026-08-25T17:37:07.181947Z"}, {"uuid": "93caa306-a02b-4cff-8c97-90d8739c0df3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7640", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmlkp2rf2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-7640 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Customer Area: \u0443\u0433\u0440\u043e\u0437\u0430 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 XSS \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c Contributor\n\n\n\nhttps://kripta.biz/posts/4CCFA833-C634-44CB-84AA-DA394E5BC387", "creation_timestamp": "2026-07-19T20:28:48.756834Z"}, {"uuid": "4806a873-efb9-4f8e-a2cb-3b0c5ba7dcac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7640", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqzmlmx7ea2u", "content": "WordPress \u63d2\u4ef6 WP Customer Area \u5b58\u50a8\u578b XSS \u6f0f\u6d1e\u5206\u6790:CVE-2026-7640 \u8be6\u89e3\n\n\n\nhttps://qian.cx/posts/A48AC5E1-7DE3-45DD-86C1-374D56AB7FD1", "creation_timestamp": "2026-07-19T20:28:50.321131Z"}, {"uuid": "d90c7f22-84cc-4569-b206-5d83d02b50f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76402", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mu5jvupzq723", "content": "\ud83d\udccc CVE-2026-76402 - In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API c... https://www.cyberhub.blog/cves/CVE-2026-76402", "creation_timestamp": "2026-08-28T14:07:18.097813Z"}]}