Splunk Splunk SOAR

• CVE-2026-76531 Critical 9.9 Files or Directories Accessible to External Parties in Splunk SOAR 0.4%
• CVE-2026-76530 High 8.8 Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR 0.3%
• CVE-2026-76529 Critical 9.8 Improper Protection of Alternate Path in Splunk SOAR 0.4%
• CVE-2026-76528 Critical 9.8 Protection Mechanism Failure in Splunk SOAR 0.4%
• CVE-2026-76527 Critical 9.8 Improper Check or Handling of Exceptional Conditions in Splunk SOAR 0.4%
• CVE-2026-76526 High 8.8 Improper Neutralization in Splunk SOAR 0.4%
• CVE-2026-76408 Critical 9.8 Improper Control of a Resource Through its Lifetime in Splunk SOAR 0.4%
• CVE-2026-76407 Critical 9.8 Improper Access Control in Splunk SOAR 0.4%
• CVE-2026-76406 Medium 5.9 Information Disclosure through REST API Authentication in Splunk SOAR 0.3%
• CVE-2026-76308 Medium 6.5 Missing Authorization through the REST API in Splunk SOAR 0.2%
• CVE-2026-76307 High 7.2 Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR 0.4%
• CVE-2026-76306 High 7.5 Information Disclosure through REST API Query Filters in Splunk SOAR 0.2%
• CVE-2026-76305 Medium 6.5 Improper Access Control during App Downloads in Splunk SOAR 0.3%
• CVE-2026-76304 Medium 4.3 Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR 0.2%
• CVE-2026-76303 Medium 5.7 Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR 0.2%
• CVE-2026-76370 Medium 4.3 Information Disclosure through the REST API in Splunk SOAR 0.3%
• CVE-2026-76369 Low 2.7 Path Traversal through Automation Broker in Splunk SOAR 0.4%
• CVE-2026-76368 Low 2.7 Missing Authorization through Playbooks in Splunk SOAR 0.3%
• CVE-2026-76367 Medium 4.0 Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR 0.2%
• CVE-2026-76366 Medium 6.5 Information Disclosure through the REST API in Splunk SOAR 0.4%
• CVE-2026-76365 Medium 6.5 Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR 0.4%
• CVE-2026-76364 Medium 6.5 Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR 0.4%
• CVE-2026-76363 Medium 6.5 Structured Query Language Injection through the REST API in Splunk SOAR 0.4%
• CVE-2026-76362 High 7.4 Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR 0.2%
• CVE-2026-76361 Low 2.7 Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR 0.3%
• CVE-2026-76360 Medium 4.3 Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR 0.3%
• CVE-2026-76359 Medium 6.5 Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR 0.5%
• CVE-2026-76358 Medium 6.5 Path Traversal through App Installation Tar Extraction in Splunk SOAR 0.5%
• CVE-2026-76357 High 7.6 Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR 0.4%
• CVE-2026-76356 High 8.1 Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR 0.6%
• CVE-2026-20260 Medium 4.3 Log Injection through HTTP Request Paths in Splunk SOAR 0.2%