Live › vulnerability › CVE-2026-76531
Go to dashboardSplunk SOAR versions before 8.7.0 expose files or directories to external parties, per CWE-552. Sources do not say which files or what an attacker can read or change with them.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Splunk SOAR | vendor | < 8.7.0 | 8.7.0 |
Check the installed Splunk SOAR version (unknown exact command in sources); versions below 8.7.0 are affected.
Upgrade Splunk SOAR to 8.7.0 or later.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76531 are related to files or directories accessible to external parties and are grouped under the Common Weakness Enumeration (CWE) CWE-552.
This page as .md · .json · in your agent: get_signal("CVE-2026-76531")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.