Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-76404
By Yogev Levi |
20 August 2026
Splunk MCP Server app unsafe deserialization enables remote code execution
Splunk advisory SVD-2026-0808 fixes 17 vulnerabilities across five apps/add-ons, topped by a critical unsafe deserialization RCE in the Splunk MCP Server app. Upgrade to the fixed versions: Cisco Talos Intelligence for Enterprise Security Cloud 1.0.3, Splunk AI Toolkit 6.0.1 (6.0.0 for the 5.7 branch), Splunk Connect for Kafka 2.2.7, Splunk MCP Server app 1.2.1, Splunk On-Call (VictorOps) 1.0.43.