Skip to content
VulniPulse
Critical9.8Splunk Updated

CVE-2026-76529: Splunk: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review

This Splunk advisory covers CVE-2026-76529 in Splunk SOAR.

Open the Splunk advisory

Key facts

Vendor rating
Critical, CVSS 9.8
CISA KEV
Not listed (catalogue checked )
Affected
Splunk SOAR before 8.7.0
Fixed in
8.7.0
Source published
Source revised
Listed by VulniPulse
Record changed

Compiled by VulniPulse from the linked sources. How records are collected and checked.

Affected products & platforms

SplunkES / ITSI / SOAR

Description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76529 are related to improper protection of alternate path and are grouped under the Common Weakness Enumeration (CWE) CWE-424.

Affected product named by the advisory: Splunk.

Affected product named by the advisory: Splunk SOAR.

Text from the source record.

Affected versions
  • Splunk SOAR before 8.7.0

Official advisory · high-confidence parse· fetched ·verify at source

How to fix CVE-2026-76529

Upgrade to a fixed release named by Splunk:

  • 8.7.0

Splunk advisories, October 2026All Splunk advisories

Get an email when Splunk ES / ITSI / SOAR publishes the next one.

See Splunk ES / ITSI / SOAR's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Splunk ES / ITSI / SOAR

iPhone and Android apps · New on the App Store

Monitor future Splunk CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.