Soar (Splunk) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2026-08-19. Vendor: Splunk.
CVEs of Soar
- CVE-2026-76370 - CVSS 4.3 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use the Representational State Transfer (REST) API to view the…
- CVE-2026-76369 - CVSS 2.7 (low), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The…
- CVE-2026-76367 - CVSS 4 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript in a note and run it in the browser of…
- CVE-2026-76368 - CVSS 2.7 (low), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permission could view metadata about a playbook repository that…
- CVE-2026-76366 - CVSS 6.5 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer (REST) API filtering on playbook runs…
- CVE-2026-76365 - CVSS 6.5 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language (SQL)…
- CVE-2026-76364 - CVSS 6.5 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language (SQL)…
- CVE-2026-76363 - CVSS 6.5 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Query Language (SQL) statements against…
- CVE-2026-76362 - CVSS 7.4 (high), 2026-08-19: In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffic between Splunk SOAR and a configured CyberArk…
- CVE-2026-76361 - CVSS 2.7 (low), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../check_connectivity endpoint to make…
- CVE-2026-76360 - CVSS 4.3 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could use the /rest/health endpoint to gather system and cluster telemetry…
- CVE-2026-76359 - CVSS 6.5 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversal in the Universal Forwarder installer's archive…
- CVE-2026-76357 - CVSS 7.6 (high), 2026-08-19: In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the Representational State Transfer…
- CVE-2026-76358 - CVSS 6.5 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal during app installation to write files outside the intended…
- CVE-2026-76356 - CVSS 8.1 (high), 2026-08-19: In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification…
- CVE-2023-3997 - CVSS 8.6 (high), 2023-07-31: Splunk SOAR versions lower than 6.1.0 are indirectly affected by a potential vulnerability accessed through the user’s terminal. A third party can send Splunk…
