Vulnerability in Splunk SOAR

[ Why it matters ]Priority signals

• Critical severity: CVSS 9.9

[ Description ]Official description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76531 are related to files or directories accessible to external parties and are grouped under the Common Weakness Enumeration (CWE) CWE-552.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• CERT-FR22 Oct 2026CERTFR-2026-AVI-1366

  Multiple vulnerabilities in Splunk products Translated from French

  Multiple vulnerabilities have been discovered in Splunk products. Some of them allow an attacker to cause arbitrary code execution, a breach of data confidentiality and remote cross-site scripting (XSS).

  CVE-2026-76298CVE-2026-42308CVE-2026-76295+108 more CVEs
• BSI CERT-Bund21 Oct 2026WID-SEC-2026-4099

  Splunk SOAR: Multiple vulnerabilities Translated from German

  Risk highCVE-2026-76307CVE-2026-76531CVE-2026-76527+12 more CVEs

[ References ]References

• advisory.splunk.com/advisories/SVD-2026-1011