Splunk Splunk SOAR
31 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76531 | < 8.7.0 | Files or Directories Accessible to External Parties in Splunk SOAR | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-76530 | < 8.7.0 | Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR | HIGH 8.8 | 0.3 % | ||
| CVE-2026-76529 | < 8.7.0 | Improper Protection of Alternate Path in Splunk SOAR | CRITICAL 9.8 | 0.2 % | ||
| CVE-2026-76528 | < 8.7.0 | Protection Mechanism Failure in Splunk SOAR | 0.1 % | |||
| CVE-2026-76527 | < 8.7.0 | Improper Check or Handling of Exceptional Conditions in Splunk SOAR | CRITICAL 9.8 | 0.4 % | ||
| CVE-2026-76526 | < 8.7.0 | Improper Neutralization in Splunk SOAR | HIGH 8.8 | 0.4 % | ||
| CVE-2026-76408 | < 8.7.0 | Improper Control of a Resource Through its Lifetime in Splunk SOAR | CRITICAL 9.8 | 0.2 % | ||
| CVE-2026-76407 | < 8.7.0 | Improper Access Control in Splunk SOAR | 0.1 % | |||
| CVE-2026-76406 | < 8.7.0 | Information Disclosure through REST API Authentication in Splunk SOAR | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-76308 | < 8.7.0 | Missing Authorization through the REST API in Splunk SOAR | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-76307 | < 8.7.0 | Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR | HIGH 7.2 | 0.4 % | ||
| CVE-2026-76306 | < 8.7.0 | Information Disclosure through REST API Query Filters in Splunk SOAR | HIGH 7.5 | 0.2 % | ||
| CVE-2026-76305 | < 8.7.0 | Improper Access Control during App Downloads in Splunk SOAR | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-76304 | < 8.7.0 | Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-76303 | < 8.7.0 | Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR | MEDIUM 5.7 | 0.2 % | ||
| CVE-2026-76370 | 8.6 – < 8.6.0 | Information Disclosure through the REST API in Splunk SOAR | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-76369 | 8.6 – < 8.6.0 | Path Traversal through Automation Broker in Splunk SOAR | LOW 2.7 | 0.4 % | ||
| CVE-2026-76368 | 8.6 – < 8.6.0 | Missing Authorization through Playbooks in Splunk SOAR | LOW 2.7 | 0.3 % | ||
| CVE-2026-76367 | 8.6 – < 8.6.0 | Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR | MEDIUM 4.0 | 0.2 % | ||
| CVE-2026-76366 | 8.6 – < 8.6.0 | Information Disclosure through the REST API in Splunk SOAR | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-76365 | 8.6 – < 8.6.0 | Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-76364 | 8.6 – < 8.6.0 | Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-76363 | 8.6 – < 8.6.0 | Structured Query Language Injection through the REST API in Splunk SOAR | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-76362 | 8.6 – < 8.6.0 | Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR | HIGH 7.4 | 0.2 % | ||
| CVE-2026-76361 | 8.6 – < 8.6.0 | Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR | LOW 2.7 | 0.3 % | ||
| CVE-2026-76360 | 8.6 – < 8.6.0 | Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-76359 | 8.6 – < 8.6.0 | Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-76358 | 8.6 – < 8.6.0 | Path Traversal through App Installation Tar Extraction in Splunk SOAR | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-76357 | 8.6 – < 8.6.0 | Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR | HIGH 7.6 | 0.4 % | ||
| CVE-2026-76356 | 8.6 – < 8.6.0 | Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR | HIGH 8.1 | 0.6 % | ||
| CVE-2026-20260 | 8.5 – < 8.5.0 | Log Injection through HTTP Request Paths in Splunk SOAR | MEDIUM 4.3 | 0.2 % |