Access Control Vulnerability in Splunk SOAR by Splunk
CVE-2026-76305

6.5MEDIUM

Key Information:

Vendor

Splunk
Status
Splunk Soar
Vendor
CVE Published:
21 October 2026

What is CVE-2026-76305?

In versions of Splunk SOAR prior to 8.7.0, an authenticated user lacking the necessary permissions could download archives of installed apps, potentially exposing sensitive data, including proprietary source code. This vulnerability arises because the system fails to verify user roles before allowing access to app archives, leading to possible data breaches.

Affected Version(s)

Splunk SOAR 0 < 8.7.0

References

https://advisory.splunk.com/advisories/SVD-2026-1010

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Gabriel Nitu, Splunk
.