Splunk Soar vulnerabilities

• splunk soar Files or Directories Accessible to External Parties in Splunk SOAR CVE-2026-76531 9.9 CriticalOctober 21, 2026
• splunk soar Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR CVE-2026-76530 8.8 HighOctober 21, 2026
• splunk soar Improper Protection of Alternate Path in Splunk SOAR CVE-2026-76529 9.8 CriticalOctober 21, 2026
• splunk soar Protection Mechanism Failure in Splunk SOAR CVE-2026-76528 9.8 CriticalOctober 21, 2026
• splunk soar Improper Check or Handling of Exceptional Conditions in Splunk SOAR CVE-2026-76527 9.8 CriticalOctober 21, 2026
• splunk soar Improper Neutralization in Splunk SOAR CVE-2026-76526 8.8 HighOctober 21, 2026
• splunk soar Improper Control of a Resource Through its Lifetime in Splunk SOAR CVE-2026-76408 9.8 CriticalOctober 21, 2026
• splunk soar Improper Access Control in Splunk SOAR CVE-2026-76407 9.8 CriticalOctober 21, 2026
• splunk soar Information Disclosure through REST API Authentication in Splunk SOAR CVE-2026-76406 5.9 MediumOctober 21, 2026
• splunk soar Missing Authorization through the REST API in Splunk SOAR CVE-2026-76308 6.5 MediumOctober 21, 2026
• splunk soar Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR CVE-2026-76307 7.2 HighOctober 21, 2026
• splunk soar Information Disclosure through REST API Query Filters in Splunk SOAR CVE-2026-76306 7.5 HighOctober 21, 2026
• splunk soar Improper Access Control during App Downloads in Splunk SOAR CVE-2026-76305 6.5 MediumOctober 21, 2026
• splunk soar Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR CVE-2026-76304 4.3 MediumOctober 21, 2026
• splunk soar Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR CVE-2026-76303 5.7 MediumOctober 21, 2026
• splunk zoom app for splunk soar Information Disclosure through Action Parameters in Zoom app for Splunk SOAR CVE-2026-76386 4.3 MediumAugust 19, 2026
• splunk venafi app for splunk soar Information Disclosure through Action Parameters in Venafi app for Splunk SOAR CVE-2026-76385 4.3 MediumAugust 19, 2026
• splunk attack analyzer connector for splunk soar Information Disclosure through Action Parameters in Splunk Attack Analyzer Connector for Splunk SOAR CVE-2026-76384 4.3 MediumAugust 19, 2026
• splunk rsa securid authentication manager app for splunk soar Information Disclosure through Action Parameters in RSA SecurID Authentication Manager app for Splunk SOAR CVE-2026-76383 4.3 MediumAugust 19, 2026
• splunk phantom app for splunk soar Information Disclosure through Action Parameters in Phantom app for Splunk SOAR CVE-2026-76382 4.3 MediumAugust 19, 2026
• splunk ms graph for active directory app for splunk soar Information Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOAR CVE-2026-76381 4.3 MediumAugust 19, 2026
• splunk crowdstrike oauth api app for splunk soar Information Disclosure through Action Parameters in CrowdStrike OAuth API app for Splunk SOAR CVE-2026-76380 4.3 MediumAugust 19, 2026
• splunk cisco webex app for splunk soar Information Disclosure through Action Parameters in Cisco Webex app for Splunk SOAR CVE-2026-76379 4.3 MediumAugust 19, 2026
• splunk cisco secure malware analytics app for splunk soar Information Disclosure through Action Parameters in Cisco Secure Malware Analytics app for Splunk SOAR CVE-2026-76378 4.3 MediumAugust 19, 2026
• splunk azure ad graph app for splunk soar Information Disclosure through Action Parameters in Azure AD Graph app for Splunk SOAR CVE-2026-76377 4.3 MediumAugust 19, 2026
• splunk aws iam app for splunk soar Information Disclosure through Action Parameters in AWS IAM app for Splunk SOAR CVE-2026-76376 4.3 MediumAugust 19, 2026
• splunk ad ldap app for splunk soar Information Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR CVE-2026-76375 5.0 MediumAugust 19, 2026
• splunk ad ldap app for splunk soar Information Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR CVE-2026-76374 4.3 MediumAugust 19, 2026
• splunk ad ldap app for splunk soar Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR CVE-2026-76373 5.4 MediumAugust 19, 2026
• splunk soar Information Disclosure through the REST API in Splunk SOAR CVE-2026-76370 4.3 MediumAugust 19, 2026
• splunk soar Path Traversal through Automation Broker in Splunk SOAR CVE-2026-76369 2.7 LowAugust 19, 2026
• splunk soar Missing Authorization through Playbooks in Splunk SOAR CVE-2026-76368 2.7 LowAugust 19, 2026
• splunk soar Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR CVE-2026-76367 4.0 MediumAugust 19, 2026
• splunk soar Information Disclosure through the REST API in Splunk SOAR CVE-2026-76366 6.5 MediumAugust 19, 2026
• splunk soar Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR CVE-2026-76365 6.5 MediumAugust 19, 2026
• splunk soar Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR CVE-2026-76364 6.5 MediumAugust 19, 2026
• splunk soar Structured Query Language Injection through the REST API in Splunk SOAR CVE-2026-76363 6.5 MediumAugust 19, 2026
• splunk soar Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR CVE-2026-76362 7.4 HighAugust 19, 2026
• splunk soar Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR CVE-2026-76361 2.7 LowAugust 19, 2026
• splunk soar Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR CVE-2026-76360 4.3 MediumAugust 19, 2026
• splunk soar Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR CVE-2026-76359 6.5 MediumAugust 19, 2026
• splunk soar Path Traversal through App Installation Tar Extraction in Splunk SOAR CVE-2026-76358 6.5 MediumAugust 19, 2026
• splunk soar Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR CVE-2026-76357 7.6 HighAugust 19, 2026
• splunk soar Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR CVE-2026-76356 8.1 HighAugust 19, 2026
• splunk soar Log Injection through HTTP Request Paths in Splunk SOAR CVE-2026-20260 4.3 MediumJune 10, 2026
• splunk soar, soar (cloud), soar (on-premises) +2 more Unauthenticated Log Injection In Splunk SOAR CVE-2023-3997 8.6 HighJuly 31, 2023