Login Request a demo
SS
Product
Splunk SOAR
by Splunk · last CVE Oct 21, 2026
31
CVEs
0
On KEV
9.9
Max CVSS
15
New 30D
Vulnerabilities31In the news0Timeline
Severity mix
Critical 1High 7Medium 15Low 3
Severity
All severities31Critical1High7Medium15Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Splunk SOAR to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-76308
New
6.5
0%
Oct 21
Missing Authorization through the REST API in Splunk SOAR
Affected: before 8.7.0
CVE-2026-76305
New
6.5
0%
Oct 21
Improper Access Control during App Downloads in Splunk SOAR
Affected: before 8.7.0
CVE-2026-76366
6.5
0%
Aug 19
Information Disclosure through the REST API in Splunk SOAR
Affected: 8.6 before 8.6.0
CVE-2026-76365
6.5
0%
Aug 19
Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR
Affected: 8.6 before 8.6.0
CVE-2026-76364
6.5
0%
Aug 19
Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR
Affected: 8.6 before 8.6.0
CVE-2026-76363
6.5
0%
Aug 19
Structured Query Language Injection through the REST API in Splunk SOAR
Affected: 8.6 before 8.6.0
CVE-2026-76359
6.5
1%
Aug 19
Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR
Affected: 8.6 before 8.6.0
CVE-2026-76358
6.5
1%
Aug 19
Path Traversal through App Installation Tar Extraction in Splunk SOAR
Affected: 8.6 before 8.6.0
CVE-2026-76406
New
5.9
0%
Oct 21
Information Disclosure through REST API Authentication in Splunk SOAR
Affected: before 8.7.0
CVE-2026-76303
New
5.7
0%
Oct 21
Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR
Affected: before 8.7.0
CVE-2026-76304
New
4.3
0%
Oct 21
Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR
Affected: before 8.7.0
CVE-2026-76370
4.3
0%
Aug 19
Information Disclosure through the REST API in Splunk SOAR
Affected: 8.6 before 8.6.0
CVE-2026-76360
4.3
0%
Aug 19
Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR
Affected: 8.6 before 8.6.0
CVE-2026-20260
4.3
0%
Jun 10
Log Injection through HTTP Request Paths in Splunk SOAR
Affected: 8.5 before 8.5.0
CVE-2026-76367
4.0
0%
Aug 19
Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR
Affected: 8.6 before 8.6.0
Showing 15