CVE-2026-76366
CVE-2026-76366: 1 tracked advisory record across Splunk. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Splunk
1 advisory- Advisory severityMedium6.5
Medium [CVE-2026-76366] Information Disclosure through the REST API in Splunk SOAR
CVE-2026-76366Source published Source updated
In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer (REST) API filtering on playbook runs to recover session tokens that compromise all data available to the affected user. The information disclosure is possible because Splunk SOAR does not block REST API filters from matching values that responses otherwise hide. For more information see REST Run Playbook ( ) in the Splunk documentation.
- Affected products in this advisory
- Splunk SOAR
- Source-reported affected versions
- Splunk SOAR 8.6 before 8.6.0
- Source-reported fixed versions
- 8.6.0
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
- Workarounds
- The information disclosure is possible because Splunk SOAR does not block REST API filters from matching values that responses otherwise hide.
Android app · Google Play
Monitor future Splunk CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.