Files or Directories Accessible to External Parties in Splunk Security Orchestration, Automation and Response (SOAR) - CVE-2026-76531
Published: October 22, 2026
Vulnerability identifier: #VU157033
CSH Severity: High
CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-76531
CWE-ID: CWE-552
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to potentially access files or directories that should be restricted.
The vulnerability exists due to insufficient restrictions on externally accessible files or directories in Splunk SOAR when exposing filesystem resources to external parties. A remote attacker can access exposed resources to potentially obtain file contents or directory information outside the intended access boundaries.
Affected software
Splunk Security Orchestration, Automation and Response (SOAR)
How to mitigate CVE-2026-76531
Install security update from vendor's website.
Splunk Security Orchestration, Automation and Response (SOAR) - update to 8.7.0