Improper Check or Handling of Exceptional Conditions in Splunk Security Orchestration, Automation and Response (SOAR) - CVE-2026-76527
Published: October 22, 2026
Vulnerability identifier: #VU157029
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-76527
CWE-ID: CWE-703
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to potentially disrupt normal operation by triggering improperly handled exceptional conditions.
The vulnerability exists due to improper checking or handling of exceptional conditions in Splunk SOAR when unexpected conditions arise during processing. A local user can trigger an affected exceptional condition to potentially interrupt processing or leave the application in an inconsistent state.
Affected software
Splunk Security Orchestration, Automation and Response (SOAR)
How to mitigate CVE-2026-76527
Install security update from vendor's website.
Splunk Security Orchestration, Automation and Response (SOAR) - update to 8.7.0