Security Feed

See the latest insights and analysis from our MDR team.
RSS for Slack
CVE-2026-76404
By Yogev Levi | 
20 August 2026

Splunk MCP Server app unsafe deserialization enables remote code execution

Splunk advisory SVD-2026-0808 fixes 17 vulnerabilities across five apps/add-ons, topped by a critical unsafe deserialization RCE in the Splunk MCP Server app. Upgrade to the fixed versions: Cisco Talos Intelligence for Enterprise Security Cloud 1.0.3, Splunk AI Toolkit 6.0.1 (6.0.0 for the 5.7 branch), Splunk Connect for Kafka 2.2.7, Splunk MCP Server app 1.2.1, Splunk On-Call (VictorOps) 1.0.43.

Full Feed
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS