- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/23/2026, Splunk SOAR recorded 30 security vulnerabilities in the last 90 days, of which 7 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Splunk SOAR and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-76531Files or Directories Accessible to External Parties in Splunk SOARCVE-2026-76530Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOARCVE-2026-76529Improper Protection of Alternate Path in Splunk SOARCVE-2026-76528Protection Mechanism Failure in Splunk SOARCVE-2026-76527Improper Check or Handling of Exceptional Conditions in Splunk SOAR| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-76531Files or Directories Accessible to External Parties in Splunk SOAR | Exploitation statusNot exploited | FixYes | Published10/21/2026 | SeverityCritical |
CVE-2026-76530Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR | Exploitation statusNot exploited | FixYes | Published10/21/2026 | SeverityHigh |
CVE-2026-76529Improper Protection of Alternate Path in Splunk SOAR | Exploitation statusNot confirmed | FixYes | Published10/21/2026 | SeverityUnknown |
CVE-2026-76528Protection Mechanism Failure in Splunk SOAR | Exploitation statusNot confirmed | FixYes | Published10/21/2026 | SeverityUnknown |
CVE-2026-76527Improper Check or Handling of Exceptional Conditions in Splunk SOAR | Exploitation statusNot confirmed | FixYes | Published10/21/2026 | SeverityUnknown |
CVE-2026-76526Improper Neutralization in Splunk SOAR | Exploitation statusNot confirmed | FixYes | Published10/21/2026 | SeverityUnknown |
CVE-2026-76408Improper Control of a Resource Through its Lifetime in Splunk SOAR | Exploitation statusNot confirmed | FixYes | Published10/21/2026 | SeverityUnknown |
CVE-2026-76407Improper Access Control in Splunk SOAR | Exploitation statusNot confirmed | FixYes | Published10/21/2026 | SeverityUnknown |
CVE-2026-76406Information Disclosure through REST API Authentication in Splunk SOAR | Exploitation statusNot confirmed | FixYes | Published10/21/2026 | SeverityMedium |
CVE-2026-76308Missing Authorization through the REST API in Splunk SOAR | Exploitation statusNot confirmed | FixYes | Published10/21/2026 | SeverityMedium |
31 Results | Page 1 of 4