Universal Forwarder

Platform

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

August 20, 2026

Last Seen

August 20, 2026

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Articles (1)

SVD-2026-0804: Security Hardening Release for Splunk SOAR - August 2026 Splunk Security Announcements / 19h In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the Representational State Transfer (REST) API and execute arbitrary code. In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversal in the Universal Forwarder installer’s archive extraction to write files outside the intended inst

advisory.splunk.com·Aug 20

Related Entities

Arbitrary Code Execution Authentication Bypass Cross-Site Scripting (xss)Denial of Service Information Disclosure Server-Side Request Forgery (ssrf)Sql Injection CVE-2026-76362 CWE-200 - Exposure of Sensitive Information CWE-22 - Path Traversal CWE-287 - Improper Authentication CWE-79 - Cross-site Scripting (xss)