Skip to content
OpenAdvisories

Product · Splunk

Splunk SOAR

31 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.7
    CVE-2026-76369

    Path Traversal through Automation Broker in Splunk SOAR

    In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possible because Automation Broker log uploads accept crafted filename input before writi…

    Splunk Splunk SOAR
  • Low 2.7
    CVE-2026-76368

    Missing Authorization through Playbooks in Splunk SOAR

    In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permission could view metadata about a playbook repository that they are not authorized to view. The vulnerability is possible because Playbook History does not chec…

    Splunk Splunk SOAR
  • Low 2.7
    CVE-2026-76361

    Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR

    In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../check_connectivity endpoint to make Splunk SOAR initiate outbound network connections to arbitrary destinations and determine whether intern…

    Splunk Splunk SOAR