{"vulnerability": "cve-2026-76404", "sightings": [{"uuid": "b24363eb-bb3c-4a7c-b737-0654b5e6d2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrrs56e24", "content": "Daily IT Security Digest \u2014 2026-08-20\nCVE-2026-76404 (CRITICAL, CVSS 9.1)\n\nA critical vulnerability in Splunk's Model Context Protocol server app allows insecure deserialization that lets admin users run arbitrary OS commands. While limited to admin users, any compromise of admin credentials could", "creation_timestamp": "2026-08-20T05:03:07.628419Z"}, {"uuid": "4011b141-ec13-4a5e-98b5-28f1bf6ca4b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtijf2aax32b", "content": "Splunk patches CVE-2026-76404, a critical remote code execution flaw in the MCP Server app, plus 16 more bugs across its apps and add-ons.\n\n#Splunk #CVE #RemoteCodeExecution #RCE #MCPServer #Deserialization #InfoSec #PatchNow", "creation_timestamp": "2026-08-20T05:31:48.056825Z"}, {"uuid": "93964811-bbf9-4c8a-891b-57648ea14162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtkku5t4y727", "content": "Splunk\u306eMCP Server\u30a2\u30d7\u30ea\u306b\u6df1\u523b\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\uff08CVE-2026-76404\u3001CVSS 9.1\uff09\u304c\u767a\u899a\n\nCVE-2026-76404: Critical Remote Code Execution Hits Splunk MCP Server App (CVSS 9.1)\u3000#DailyCyberSecurity (Aug 20)\n\nsecurityonline.info/splunk-apps-...", "creation_timestamp": "2026-08-21T01:03:28.092029Z"}, {"uuid": "8008f038-fdd9-47ca-baf5-e1e372cc059a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtkqogn7uj2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-65400: 28 interactions\nCVE-2026-59310: 25 interactions\nCVE-2026-43499: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-19490: 8 interactions\nCVE-2026-76404: 8 interactions\nCVE-2026-63030: 7 interactions\n", "creation_timestamp": "2026-08-21T02:47:38.506939Z"}, {"uuid": "b5baa024-0517-4162-958d-5182a5f4e377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtnps7cets2f", "content": "Critical CVE-2026-76404 patched: Splunk MCP Server RCE + 16 flaws fixed \u2014 update now, especially AI Toolkit and Kafka apps. #Splunk #Cybersecurity #RCE #AIsecurity #Vulnerabilities https://thedailytechfeed.com/splunk-urgent-patch-released-critical-rce-in-mcp-server-16-other-flaws/", "creation_timestamp": "2026-08-22T07:09:51.721433Z"}, {"uuid": "6312b6c0-94f8-4a46-9843-f3e04e56bdee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtjizs5v6j2h", "content": "CVE-2026-76404 is trending. Hype score 4, currently #10 on cvemon.\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-76404", "creation_timestamp": "2026-08-20T14:58:09.767408Z"}, {"uuid": "861252e0-82cf-47d2-9002-a4a56696cd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjphemr2m", "content": "\ud83d\udd34 CVE-2026-76404 - Critical (9.1)\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could exe...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76404/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T23:00:43.175545Z"}, {"uuid": "12e03d0f-171f-4b53-91b1-5a230c60576c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthxfqi6lq2t", "content": "\ud83d\udea8 CVE-2026-76404 \u2014 CVSS 9.1 CRITICAL\n\nIn Splunk MCP Server app versions below 1.2.1, a user who holds the \"admin\" Splunk role could execute arbit...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76404\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T00:10:04.354266Z"}, {"uuid": "b78289b1-cf69-454a-ac39-0157842c7675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76404", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtiavsq55r2y", "content": "CVE-2026-76404 - splunk mcp server app\nThe Splunk MCP Server app, used for managing credentials, has a security flaw that could allow an administrator to execute unauthorized commands on the server. This is a concern\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#splunk #CVE #infosec", "creation_timestamp": "2026-08-20T03:00:06.501443Z"}, {"uuid": "4fd1aa7b-c36d-495a-887d-11152f20c03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76404", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117125600108651443", "content": "Splunk MCP Server app v1.2 is impacted by CVE-2026-76404 (CRITICAL, CVSS 9.1) \u2014 insecure deserialization lets admin users run arbitrary OS commands. Limit admin access & monitor for misuse until a patch is released. https://radar.offseq.com/threat/cve-2026-76404-the-application-deserializes-untrusted-data-without-sufficiently-verifying-that-the-a0d42d963a9e6a80 #OffSeq #Splunk #Infosec #CVE202676404", "creation_timestamp": "2026-08-20T03:00:26.755010Z"}, {"uuid": "47fdfaf8-869a-45fe-9290-5b782695cd6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76404", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtiawh7eli2n", "content": "CVE-2026-76404: Splunk MCP Server v1.2 (CRITICAL) enables admin users to run arbitrary OS commands due to unsafe deserialization. Restrict admin roles & monitor activity. Patch status unknown. https://radar.offseq.com/threat/cve-2026-76404-the-application-deserializes-untrusted-data-without-suffi...", "creation_timestamp": "2026-08-20T03:00:29.148002Z"}]}