Improper Protection of Alternate Path in Splunk Security Orchestration, Automation and Response (SOAR) - CVE-2026-76529
Published: October 22, 2026
Vulnerability identifier: #VU157031
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-76529
CWE-ID: CWE-424
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to potentially bypass security restrictions through an alternate access path.
The vulnerability exists due to improper protection of an alternate path in Splunk SOAR when a protected resource or operation is accessed through a different route. A remote attacker can use an insufficiently protected alternate path to potentially avoid security checks applied to the intended access path.
Affected software
Splunk Security Orchestration, Automation and Response (SOAR)
How to mitigate CVE-2026-76529
Install security update from vendor's website.
Splunk Security Orchestration, Automation and Response (SOAR) - update to 8.7.0