Live › vulnerability › CVE-2026-76530
Go to dashboardSplunk SOAR before 8.7.0 uses non-canonical URL paths in authorization decisions (CWE-647), so a crafted URL can bypass authorization checks. CVSS 8.8 (network, low privileges required). Part of Splunk's October 2026 SOAR hardening release, which fixes eight CVEs grouped by CWE; the worst in that advisory is CVE-2026-76531 at 9.9. Splunk's advisory does not say which endpoints are affected.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Splunk SOAR | vendor | < 8.7.0 | 8.7.0 |
8.7.0 is affected8.7.0 or higher, per SVD-2026-1011Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76530 are related to use of non-canonical URL paths for authorization decisions and are grouped under the Common Weakness Enumeration (CWE) CWE-647.
This page as .md · .json · in your agent: get_signal("CVE-2026-76530")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.