Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
6001 articles · 245867 vulns · 36/41 feeds (7d)
← Back to list
9.9
CVE-2026-76531PATCHED
splunk · splunk soar

Files or Directories Accessible to External Parties in Splunk SOAR

Description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76531 are related to files or directories accessible to external parties and are grouped under the Common Weakness Enumeration (CWE) CWE-552.

Affected Products

VendorProductVersions
splunksplunk soar0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
splunksoarcert_advisory90%

References

  • https://advisory.splunk.com/advisories/SVD-2026-1011

Related News (4 articles)

Tier B
BSI Advisories7h ago
[NEU] [hoch] Splunk SOAR: Mehrere Schwachstellen
→ No new info (linked only)
Tier D
SecurityWeek11h ago
Splunk, SolarWinds Release Fresh Security Updates
→ No new info (linked only)
Tier B
CERT-FR21h ago
Multiples vulnérabilités dans les produits Splunk (22 octobre 2026)
→ No new info (linked only)
Tier C
VulDB22h ago
CVE-2026-76531 | Splunk SOAR up to 8.6.x file access
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.9 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
8.7.0
CWECWE-552
PublishedOct 21, 2026
Last enriched10h agov3
Tags
data-exposureimproper-access-control
Trending Score53
Source articles5
Independent4
Info Completeness8/14
Missing: cvss, epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-76299
Security Hardening in Splunk Enterprise - October 2026
Trending: 53
HIGHCVE-2026-76288
Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise
Trending: 51
HIGHCVE-2026-76290
Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise
Trending: 51
CRITICALCVE-2026-76302
Security Hardening in Splunk Enterprise - October 2026
Trending: 49
HIGHCVE-2026-76298
Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise
Trending: 46

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 21, 2026
Discovered by ZDM
Oct 21, 2026
Updated: affectedVersions, severity, description
Oct 21, 2026
Updated: tags
Oct 22, 2026
Patch Available
Oct 22, 2026

Version History

v3
Last enriched 10h ago
v3Tier D10h ago

Added specific vulnerability types (data exposure and improper access control) as tags based on article's description of CVE-2026-76531 and CVE-2026-76407 affecting SOAR 8.7.0 patch.

tags
via SecurityWeek
v2Tier C21h ago

Updated severity from NONE to CRITICAL, clarified affected versions as up to 8.6.x, and added confirmation that vulnerability is remotely exploitable.

affectedVersionsseveritydescription
via VulDB
v122h ago

Initial creation