Vulnerabilities

TI-2026-53445 CVE-2026-76390 · GHSA-x4c2-cp22-3gjj

Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud

LOW 30

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00394 Published 2026-08-19 Fixed in 1.0.3 CWE-200

TI-2026-53444 CVE-2026-76389 · GHSA-cccc-wrrh-hw2h

Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security Cloud

MEDIUM 40

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the get_talos_enrichment capability could send a crafted request to the Talos intelligence enrichment Represen…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00417 Published 2026-08-19 Fixed in 1.0.3 CWE-918

Vulnerabilities

Filters

Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud

Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security Cloud