Splunk Soar
31 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Splunk Soar, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
Splunk Soar CVEs per month
| Month | CVEs |
|---|---|
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 1 |
| 2026-07 | 0 |
| 2026-08 | 15 |
| 2026-09 | 0 |
| 2026-10 | 15 |
Severity
How the 31 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1
- High6
- Medium15
- Low3
Latest CVEs
The 15 most recently published vulnerabilities affecting Splunk Soar.
- CVE-2026-76531Files or Directories Accessible to External Parties in Splunk SOAR9.9
- CVE-2026-76530Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR8.8
- CVE-2026-76529Improper Protection of Alternate Path in Splunk SOAR—
- CVE-2026-76528Protection Mechanism Failure in Splunk SOAR—
- CVE-2026-76527Improper Check or Handling of Exceptional Conditions in Splunk SOAR—
- CVE-2026-76526Improper Neutralization in Splunk SOAR—
- CVE-2026-76408Improper Control of a Resource Through its Lifetime in Splunk SOAR—
- CVE-2026-76407Improper Access Control in Splunk SOAR—
- CVE-2026-76406Information Disclosure through REST API Authentication in Splunk SOAR5.9
- CVE-2026-76308Missing Authorization through the REST API in Splunk SOAR6.5
- CVE-2026-76307Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR7.2
- CVE-2026-76306Information Disclosure through REST API Query Filters in Splunk SOAR7.5
- CVE-2026-76305Improper Access Control during App Downloads in Splunk SOAR6.5
- CVE-2026-76304Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR4.3
- CVE-2026-76303Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR5.7
Product grouping is registry-driven, with AI assist and human review. How it works