Patchfirst
Patchfirst
CVE-2026-76531 Critical · 9.9 EPSS 0.4%

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…

Splunk · Splunk SOAR

Summary

The flaw is a files-or-directories-accessible-to-external-parties weakness (CWE-552) in Splunk SOAR, identified during Cisco's internal security review and addressed in a software hardening release. An attacker with network access and low-privilege authentication can exploit it without any user interaction, with the impact crossing into a changed security scope and affecting confidentiality, integrity and availability.

Official description · NVD

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76531 are related to files or directories accessible to external parties and are grouped under the Common Weakness Enumeration (CWE) CWE-552.

Breakdown
15.9 / 100
Exploited
Not confirmed
Reports
0
Tactics
0/15

Disclosed on 21 Oct 2026. No public exploit code or confirmed exploitation is recorded.

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Not named in any threat report yet

Also mentioned in 6 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

References

1 link, grouped by NVD tag

Other 1

advisory.splunk.com/advisories/SVD-2026-1011
↑ ↓ chooseEnter openEsc close