Splunk and Zoom Patch Multiple Vulnerabilities, Including Critical Flaws
Summary
Splunk and Zoom issued patches for multiple flaws, including critical and high-severity issues. Zoom’s CVE-2026-53412 could enable remote account takeover; Splunk fixes include a command-safeguards bypass and path traversal. Neither company mentioned in-the-wild use.
Key points
- Splunk published five advisories; three address Splunk-specific flaws and two cover bugs in third-party components.
- Splunk-specific flaws include CVE-2026-20296, a high-severity command-safeguards bypass; CVE-2026-20297, a high-severity path traversal; and CVE-2026-20298, a medium-severity information disclosure.
- Splunk says successful exploitation could expose credentials or data, write files outside the intended application directory, or reveal stored credential hashes.
- Splunk included fixes in Enterprise versions 10.4.1, 10.2.5, 10.0.8, and 9.4.13; these updates also address vulnerabilities in Go, OpenSSL, and other third-party components.
- Zoom published four advisories covering vulnerabilities in its Windows clients and tools. The most severe, CVE-2026-53412, is rated CVSS 9.8 and could allow remote, unauthenticated account takeover.
- Zoom’s updates also address a TOCTOU race condition and two privilege-elevation flaws. Neither company mentioned the vulnerabilities being exploited in the wild.
Article Details
- Event Type
- Splunk and Zoom released patches for multiple vulnerabilities in their products.
- Impact
- Successful exploitation of Splunk’s product-specific vulnerabilities could expose credentials and data, allow files to be written outside the intended application directory, or reveal stored credential hashes. Zoom’s critical CVE-2026-53412 could allow remote, unauthenticated attackers to mount account-takeover attacks; its other updates address a TOCTOU race condition and two privilege-elevation flaws. Neither company mentioned exploitation in the wild.
CVE
CVE-2026-20296Splunk · Splunk; Splunk · Splunk cloud platformThe Splunk-specific issues include CVE-2026-20296 (a high-severity command safeguards bypass), CVE-2026-20297 (a high-severity path traversal), and CVE-2026-20298 (a medium-severity information disclosure).CVE-2026-20297Splunk · Splunk; Splunk · Splunk cloud platformThe Splunk-specific issues include CVE-2026-20296 (a high-severity command safeguards bypass), CVE-2026-20297 (a high-severity path traversal), and CVE-2026-20298 (a medium-severity information disclosure).CVE-2026-20298Splunk · Splunk; Splunk · Splunk cloud platformThe Splunk-specific issues include CVE-2026-20296 (a high-severity command safeguards bypass), CVE-2026-20297 (a high-severity path traversal), and CVE-2026-20298 (a medium-severity information disclosure).CVE-2026-53412Zoom · Workplace desktop; Zoom · Workplace virtual desktop infrastructureThe most severe is CVE-2026-53412 (CVSS score of 9.8), a critical bug in Zoom’s Workplace and Workplace VDI Client for Windows that could allow remote, unauthenticated attackers to mount account takeover attacks.
Vendors
SplunkSplunk and Zoom this week announced patches for multiple vulnerabilities across their products, including several critical and high-severity security defects.ZoomSplunk and Zoom this week announced patches for multiple vulnerabilities across their products, including several critical and high-severity security defects.
Products
Splunk EnterprisePatches for all three were included in Splunk Enterprise versions 10.4.1, 10.2.5, 10.0.8, and 9.4.13, which also address critical- and high-severity vulnerabilities in Golang, Go compiler, OpenSSL, and other third-partyZoom Workplace VDI ClientThe most severe is CVE-2026-53412 (CVSS score of 9.8), a critical bug in Zoom’s Workplace and Workplace VDI Client for Windows that could allow remote, unauthenticated attackers to mount account takeover attacks.