Skip to content
OpenAdvisories

Product · Splunk

Splunk SOAR

31 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2026-76530

    Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR

    As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. …

    Splunk Splunk SOAR
  • High 8.8
    CVE-2026-76526

    Improper Neutralization in Splunk SOAR

    As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. …

    Splunk Splunk SOAR
  • High 7.2
    CVE-2026-76307

    Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR

    In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could use the Representational State Transfer (REST) API to infer authentication token values for other users. If the inferred token grants administrative a…

    Splunk Splunk SOAR
  • High 7.5
    CVE-2026-76306

    Information Disclosure through REST API Query Filters in Splunk SOAR

    In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the Representational State Transfer (REST) API to infer password hashes and authorization tokens for other users. The information disclosure is possible becaus…

    Splunk Splunk SOAR
  • High 7.4
    CVE-2026-76362

    Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR

    In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffic between Splunk SOAR and a configured CyberArk Representational State Transfer (REST) server could access or modify all relevant data exchanged through that c…

    Splunk Splunk SOAR
  • High 7.6
    CVE-2026-76357

    Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR

    In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the Representational State Transfer (REST) API and execute arbitrary code. The vulnerability is possible because the REST API does not require…

    Splunk Splunk SOAR
  • High 8.1
    CVE-2026-76356

    Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR

    In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification endpoint and execute arbitrary code on the Splunk SOAR host. The vulnerability is possible because the Spl…

    Splunk Splunk SOAR