Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-76407 EUVD-2026-107641GHSA-chh5-phg6-q4h8

Improper Access Control in Splunk SOAR

Published Oct 21, 2026 · Updated Nov 2, 2026 · Assigned by cisco

Description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76407 are related to improper access control and are grouped under the Common Weakness Enumeration (CWE) CWE-284.

Affected products

VendorProductAffectedFixed
Splunk Splunk SOAR < 8.7.0 8.7.0

Advisories 2

References