Multiples vulnérabilités dans les produits Splunk

{
  "id": "5af5b7a161407c14ea1093f9948fd8e45206e5e4c7b56dba733725538619809a",
  "url": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1366/",
  "method": "llm",
  "payload": {
    "kind": "advisory",
    "title": "Multiples vulnérabilités dans les produits Splunk",
    "summary": "Multiple vulnerabilities affect Splunk Enterprise and Splunk SOAR; some may allow arbitrary code execution, data confidentiality breaches, or remote cross-site scripting. Consult the vendor bulletins for fixes.",
    "evidence": "De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).",
    "products": [
      {
        "name": {
          "value": "Splunk Enterprise",
          "evidence": "Splunk Enterprise versions 10.0.x antérieures à 10.0.11"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "10.0.x antérieures à 10.0.11",
            "evidence": "Splunk Enterprise versions 10.0.x antérieures à 10.0.11"
          },
          {
            "value": "10.2.x antérieures à 10.2.8",
            "evidence": "Splunk Enterprise versions 10.2.x antérieures à 10.2.8"
          },
          {
            "value": "10.4.x antérieures à 10.4.4",
            "evidence": "Splunk Enterprise versions 10.4.x antérieures à 10.4.4"
          },
          {
            "value": "9.4.x antérieures à 9.4.16",
            "evidence": "Splunk Enterprise versions 9.4.x antérieures à 9.4.16"
          }
        ]
      },
      {
        "name": {
          "value": "Splunk SOAR",
          "evidence": "Splunk SOAR versions antérieures à 8.7.0"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "antérieures à 8.7.0",
            "evidence": "Splunk SOAR versions antérieures à 8.7.0"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2024-34062",
        "evidence": "Référence CVE CVE-2024-34062"
      },
      {
        "value": "CVE-2025-13465",
        "evidence": "Référence CVE CVE-2025-13465"
      },
      {
        "value": "CVE-2025-61726",
        "evidence": "Référence CVE CVE-2025-61726"
      },
      {
        "value": "CVE-2025-61731",
        "evidence": "Référence CVE CVE-2025-61731"
      },
      {
        "value": "CVE-2025-61732",
        "evidence": "Référence CVE CVE-2025-61732"
      },
      {
        "value": "CVE-2025-68119",
        "evidence": "Référence CVE CVE-2025-68119"
      },
      {
        "value": "CVE-2025-68121",
        "evidence": "Référence CVE CVE-2025-68121"
      },
      {
        "value": "CVE-2025-69277",
        "evidence": "Référence CVE CVE-2025-69277"
      },
      {
        "value": "CVE-2026-0994",
        "evidence": "Référence CVE CVE-2026-0994"
      },
      {
        "value": "CVE-2026-12143",
        "evidence": "Référence CVE CVE-2026-12143"
      },
      {
        "value": "CVE-2026-13149",
        "evidence": "Référence CVE CVE-2026-13149"
      },
      {
        "value": "CVE-2026-13676",
        "evidence": "Référence CVE CVE-2026-13676"
      },
      {
        "value": "CVE-2026-14257",
        "evidence": "Référence CVE CVE-2026-14257"
      },
      {
        "value": "CVE-2026-25541",
        "evidence": "Référence CVE CVE-2026-25541"
      },
      {
        "value": "CVE-2026-25679",
        "evidence": "Référence CVE CVE-2026-25679"
      },
      {
        "value": "CVE-2026-25990",
        "evidence": "Référence CVE CVE-2026-25990"
      },
      {
        "value": "CVE-2026-27137",
        "evidence": "Référence CVE CVE-2026-27137"
      },
      {
        "value": "CVE-2026-27140",
        "evidence": "Référence CVE CVE-2026-27140"
      },
      {
        "value": "CVE-2026-27141",
        "evidence": "Référence CVE CVE-2026-27141"
      },
      {
        "value": "CVE-2026-27143",
        "evidence": "Référence CVE CVE-2026-27143"
      },
      {
        "value": "CVE-2026-27144",
        "evidence": "Référence CVE CVE-2026-27144"
      },
      {
        "value": "CVE-2026-32280",
        "evidence": "Référence CVE CVE-2026-32280"
      },
      {
        "value": "CVE-2026-32281",
        "evidence": "Référence CVE CVE-2026-32281"
      },
      {
        "value": "CVE-2026-32283",
        "evidence": "Référence CVE CVE-2026-32283"
      },
      {
        "value": "CVE-2026-33186",
        "evidence": "Référence CVE CVE-2026-33186"
      },
      {
        "value": "CVE-2026-34073",
        "evidence": "Référence CVE CVE-2026-34073"
      },
      {
        "value": "CVE-2026-39821",
        "evidence": "Référence CVE CVE-2026-39821"
      },
      {
        "value": "CVE-2026-39830",
        "evidence": "Référence CVE CVE-2026-39830"
      },
      {
        "value": "CVE-2026-39831",
        "evidence": "Référence CVE CVE-2026-39831"
      },
      {
        "value": "CVE-2026-39832",
        "evidence": "Référence CVE CVE-2026-39832"
      },
      {
        "value": "CVE-2026-39833",
        "evidence": "Référence CVE CVE-2026-39833"
      },
      {
        "value": "CVE-2026-39834",
        "evidence": "Référence CVE CVE-2026-39834"
      },
      {
        "value": "CVE-2026-39892",
        "evidence": "Référence CVE CVE-2026-39892"
      },
      {
        "value": "CVE-2026-40192",
        "evidence": "Référence CVE CVE-2026-40192"
      },
      {
        "value": "CVE-2026-42308",
        "evidence": "Référence CVE CVE-2026-42308"
      },
      {
        "value": "CVE-2026-42309",
        "evidence": "Référence CVE CVE-2026-42309"
      },
      {
        "value": "CVE-2026-42310",
        "evidence": "Référence CVE CVE-2026-42310"
      },
      {
        "value": "CVE-2026-42311",
        "evidence": "Référence CVE CVE-2026-42311"
      },
      {
        "value": "CVE-2026-42508",
        "evidence": "Référence CVE CVE-2026-42508"
      },
      {
        "value": "CVE-2026-4539",
        "evidence": "Référence CVE CVE-2026-4539"
      },
      {
        "value": "CVE-2026-45409",
        "evidence": "Référence CVE CVE-2026-45409"
      },
      {
        "value": "CVE-2026-46595",
        "evidence": "Référence CVE CVE-2026-46595"
      },
      {
        "value": "CVE-2026-4800",
        "evidence": "Référence CVE CVE-2026-4800"
      },
      {
        "value": "CVE-2026-48522",
        "evidence": "Référence CVE CVE-2026-48522"
      },
      {
        "value": "CVE-2026-48523",
        "evidence": "Référence CVE CVE-2026-48523"
      },
      {
        "value": "CVE-2026-48525",
        "evidence": "Référence CVE CVE-2026-48525"
      },
      {
        "value": "CVE-2026-48526",
        "evidence": "Référence CVE CVE-2026-48526"
      },
      {
        "value": "CVE-2026-54058",
        "evidence": "Référence CVE CVE-2026-54058"
      },
      {
        "value": "CVE-2026-54059",
        "evidence": "Référence CVE CVE-2026-54059"
      },
      {
        "value": "CVE-2026-54060",
        "evidence": "Référence CVE CVE-2026-54060"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-cert-fr-advisories",
  "document_id": 23350,
  "published_at": "2026-10-22T00:00:00+00:00"
}