Splunk Soar (Splunk) - vulnerabilities (CVEs)

31 CVEs, 15 in the last 30 days, 2 known versions, newest CVE from 2026-10-21. Vendor: Splunk.

CVEs of Splunk Soar

• CVE-2026-76531 - CVSS 9.9 (critical), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
• CVE-2026-76530 - CVSS 8.8 (high), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
• CVE-2026-76529, 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
• CVE-2026-76528, 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
• CVE-2026-76527, 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
• CVE-2026-76526 - CVSS 8.8 (high), 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
• CVE-2026-76408, 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
• CVE-2026-76407, 2026-10-21: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
• CVE-2026-76406 - CVSS 5.9 (medium), 2026-10-21: In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected Splunk SOAR instance could submit Basic…
• CVE-2026-76308 - CVSS 6.5 (medium), 2026-10-21: In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition through the Representational State Transfer (REST) API…
• CVE-2026-76307 - CVSS 7.2 (high), 2026-10-21: In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could use the Representational State Transfer (REST)…
• CVE-2026-76306 - CVSS 7.5 (high), 2026-10-21: In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the Representational State Transfer (REST) API to infer…
• CVE-2026-76305 - CVSS 6.5 (medium), 2026-10-21: In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view apps could download an archive of an installed…
• CVE-2026-76304 - CVSS 4.3 (medium), 2026-10-21: In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Automation Brokers could download the Splunk SOAR…
• CVE-2026-76303 - CVSS 5.7 (medium), 2026-10-21: In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store attacker-controlled content that Splunk SOAR…
• CVE-2026-76370 - CVSS 4.3 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use the Representational State Transfer (REST) API to view the…
• CVE-2026-76369 - CVSS 2.7 (low), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The…
• CVE-2026-76368 - CVSS 2.7 (low), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permission could view metadata about a playbook repository that…
• CVE-2026-76367 - CVSS 4 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript in a note and run it in the browser of…
• CVE-2026-76366 - CVSS 6.5 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer (REST) API filtering on playbook runs…
• CVE-2026-76365 - CVSS 6.5 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language (SQL)…
• CVE-2026-76364 - CVSS 6.5 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language (SQL)…
• CVE-2026-76363 - CVSS 6.5 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Query Language (SQL) statements against…
• CVE-2026-76362 - CVSS 7.4 (high), 2026-08-19: In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffic between Splunk SOAR and a configured CyberArk…
• CVE-2026-76360 - CVSS 4.3 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could use the /rest/health endpoint to gather system and cluster telemetry…
• CVE-2026-76361 - CVSS 2.7 (low), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../check_connectivity endpoint to make…
• CVE-2026-76359 - CVSS 6.5 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversal in the Universal Forwarder installer's archive…
• CVE-2026-76358 - CVSS 6.5 (medium), 2026-08-19: In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal during app installation to write files outside the intended…
• CVE-2026-76357 - CVSS 7.6 (high), 2026-08-19: In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the Representational State Transfer…
• CVE-2026-76356 - CVSS 8.1 (high), 2026-08-19: In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification…
• CVE-2026-20260 - CVSS 4.3 (medium), 2026-06-10: In Splunk SOAR (Security Orchestration, Automation, and Response) versions below 8.5.0, an unauthenticated attacker could inject American National Standards…