Protection mechanism failure in Splunk Security Orchestration, Automation and Response (SOAR) - CVE-2026-76528
Published: October 22, 2026
Vulnerability identifier: #VU157030
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-76528
CWE-ID: CWE-693
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to potentially bypass intended security protections.
The vulnerability exists due to a protection mechanism failure in Splunk SOAR when enforcing security restrictions. A remote attacker can exploit ineffective enforcement to potentially perform actions that the affected protection mechanism is intended to prevent.
Affected software
Splunk Security Orchestration, Automation and Response (SOAR)
How to mitigate CVE-2026-76528
Install security update from vendor's website.
Splunk Security Orchestration, Automation and Response (SOAR) - update to 8.7.0