What’s Vulnerable › Products
Splunk SOAR vulnerabilities
32 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 31 published in the last 12 months.
Check whether your Splunk SOAR version is affected
Latest Splunk SOAR vulnerabilities
- CVE-2026-76531 — Files or Directories Accessible to External Parties in Splunk SOAR (CVSS 9.9)
- CVE-2026-76530 — Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR (CVSS 8.8)
- CVE-2026-76529 — Improper Protection of Alternate Path in Splunk SOAR
- CVE-2026-76528 — Protection Mechanism Failure in Splunk SOAR
- CVE-2026-76527 — Improper Check or Handling of Exceptional Conditions in Splunk SOAR
- CVE-2026-76526 — Improper Neutralization in Splunk SOAR (CVSS 8.8)
- CVE-2026-76408 — Improper Control of a Resource Through its Lifetime in Splunk SOAR
- CVE-2026-76407 — Improper Access Control in Splunk SOAR
- CVE-2026-76406 — Information Disclosure through REST API Authentication in Splunk SOAR (CVSS 5.9)
- CVE-2026-76308 — Missing Authorization through the REST API in Splunk SOAR (CVSS 6.5)
- CVE-2026-76307 — Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR (CVSS 7.2)
- CVE-2026-76306 — Information Disclosure through REST API Query Filters in Splunk SOAR (CVSS 7.5)
- CVE-2026-76305 — Improper Access Control during App Downloads in Splunk SOAR (CVSS 6.5)
- CVE-2026-76304 — Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR (CVSS 4.3)
- CVE-2026-76303 — Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR (CVSS 5.7)
- CVE-2026-76370 — Information Disclosure through the REST API in Splunk SOAR (CVSS 4.3)
- CVE-2026-76369 — Path Traversal through Automation Broker in Splunk SOAR (CVSS 2.7)
- CVE-2026-76368 — Missing Authorization through Playbooks in Splunk SOAR (CVSS 2.7)
- CVE-2026-76367 — Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR (CVSS 4.0)
- CVE-2026-76366 — Information Disclosure through the REST API in Splunk SOAR (CVSS 6.5)
- CVE-2026-76365 — Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR (CVSS 6.5)
- CVE-2026-76364 — Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR (CVSS 6.5)
- CVE-2026-76363 — Structured Query Language Injection through the REST API in Splunk SOAR (CVSS 6.5)
- CVE-2026-76362 — Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR (CVSS 7.4)
- CVE-2026-76361 — Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR (CVSS 2.7)