Disclosure summary
Splunk advisory SVD-2026-1005 reports CVE-2025-22870. Open the original advisory for product-specific details and fixed versions.
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
Splunk Security Advisories · SPLUNK-SVD-2026-1005
Open original source · Updated Oct 08, 2026
Third-Party Package Updates in Splunk Add-on for Amazon Web Services - September 2026
Vendor advisory association; do not assume every product in a grouped advisory is affected by each CVE.
Microsoft Security Updates (CVRF) · 2025-Mar
Open original source · Updated Sep 16, 2026
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
Maximum of vendor-reported product scores; products and fixed builds are associations, not a universal affected-version statement.
Microsoft maximum product score: 4.4
| Vendor | Product / association | Version / bounds |
|---|---|---|
| Microsoft update guide | cbl2 influxdb 2.6.1-22 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 golang 1.22.7-4 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 packer 1.9.5-13 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 azcopy 10.25.1-5 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 telegraf 1.31.0-10 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 vitess 19.0.4-7 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 golang 1.18.8-8 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 git-lfs 3.5.1-5 on CBL-Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 influxdb 2.6.1-22 on CBL-Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 packer 1.9.5-13 on CBL-Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 azcopy 10.25.1-5 on CBL-Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 telegraf 1.29.4-16 on CBL-Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 golang 1.18.8-8 on CBL-Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 telegraf 1.29.4-14 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 azcopy 10.25.1-4 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 vitess 17.0.7-7 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 packer 1.9.5-11 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 prometheus 2.45.4-12 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 packer 1.9.5-8 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 azcopy 10.25.1-4 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 keda 2.14.1-6 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 git-lfs 3.6.1-2 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 vitess 19.0.4-6 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 prometheus-node-exporter 1.7.0-3 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 influxdb 2.7.5-3 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 telegraf 1.31.0-6 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 prometheus-process-exporter 0.8.2-2 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 git-lfs 3.5.1-5 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 blobfuse2 2.1.2-8 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 vitess 17.0.7-8 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 influxdb 2.7.5-5 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 keda 2.4.0-29 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 telegraf 1.29.4-16 on CBL Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 keda 2.14.1-7 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 packer 1.9.5-9 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 golang 1.22.7-4 on CBL-Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 vitess 17.0.7-8 on CBL-Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | cbl2 keda 2.4.0-29 on CBL-Mariner 2.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 golang 1.27.0-1 on Azure Linux 3.0 | (MSRC status code 3) |
Vendor remediation references
- CBL-Mariner Releases · build 2.6.1-22 · product IDs 19833-17086, 19833-21692
- Vendor guidance · product IDs 19833-17086, 19833-21692
- CBL-Mariner Releases · build 1.22.7-4 · product IDs 20123-17086, 20123-21692
- Vendor guidance · product IDs 20123-17086, 20123-21692
- CBL-Mariner Releases · build 1.9.5-11 · product IDs 19945-17086, 19945-21692, 17201-16823
- Vendor guidance · product IDs 19945-17086, 19945-21692, 17201-16823
- CBL-Mariner Releases · build 10.25.1-4 · product IDs 19921-17086, 19921-21692, 17193-16823, 17591-17084
- Vendor guidance · product IDs 19921-17086, 19921-21692, 17193-16823, 17591-17084
- CBL-Mariner Releases · build 1.31.0-6 · product IDs 19343-17084, 17583-17084
- Vendor guidance · product IDs 19343-17084, 17583-17084
- CBL-Mariner Releases · build 19.0.4-6 · product IDs 17547-17084, 19323-17084
- Vendor guidance · product IDs 17547-17084, 19323-17084
- CBL-Mariner Releases · build 1.18.8-8 · product IDs 19755-17086, 19755-21692
- Vendor guidance · product IDs 19755-17086, 19755-21692
- CBL-Mariner Releases · build 3.5.1-5 · product IDs 19936-21692, 19936-17086
- Vendor guidance · product IDs 19936-21692, 19936-17086
- CBL-Mariner Releases · build 1.29.4-14 · product IDs 19939-21692, 17188-16823, 19939-17086
- Vendor guidance · product IDs 19939-21692, 17188-16823, 19939-17086
- CBL-Mariner Releases · build 17.0.7-7 · product IDs 19320-16823, 19698-17086, 19698-21692
- Vendor guidance · product IDs 19320-16823, 19698-17086, 19698-21692
- CBL-Mariner Releases · build 2.45.4-12 · product IDs 17582-17084
- Vendor guidance · product IDs 17582-17084
- CBL-Mariner Releases · build 1.9.5-8 · product IDs 17589-17084, 19335-17084
- Vendor guidance · product IDs 17589-17084, 19335-17084
- CBL-Mariner Releases · build 2.14.1-6 · product IDs 17585-17084, 19347-17084
- Vendor guidance · product IDs 17585-17084, 19347-17084
- CBL-Mariner Releases · build 3.6.1-2 · product IDs 19322-17084
- Vendor guidance · product IDs 19322-17084
- CBL-Mariner Releases · build 1.7.0-3 · product IDs 19324-17084
- Vendor guidance · product IDs 19324-17084
- CBL-Mariner Releases · build 2.7.5-3 · product IDs 17588-17084, 19344-17084
- Vendor guidance · product IDs 17588-17084, 19344-17084
- CBL-Mariner Releases · build 0.8.2-2 · product IDs 19325-17084
- Vendor guidance · product IDs 19325-17084
- CBL-Mariner Releases · build 2.4.0-29 · product IDs 19836-17086, 19836-21692
- Vendor guidance · product IDs 19836-17086, 19836-21692
- Vendor guidance · product IDs 21778-17084
- Vendor guidance · product IDs 21778-17084
Original records & references
- NIST NVD record
- CVE Program record
- advisory.splunk.com — Vendor advisory
PUBLISHED 2026-10-06T20:00:00-04:00
MODIFIED 2026-10-08T12:30:45-04:00
INGESTED 2026-10-08T12:30:45-04:00