Login Request a demo
SO
Product
Soar
by Splunk · last CVE Oct 21, 2026
17
CVEs
0
On KEV
8.1
Max CVSS
1
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 0High 4Medium 10Low 3
Severity
All severities17Critical0High4Medium10Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Soar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-76366
6.5
0%
Aug 19
Information Disclosure through the REST API in Splunk SOAR
Affected: before 8.6.0; before 8.6.0
CVE-2026-76365
6.5
0%
Aug 19
Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR
Affected: before 8.6.0; before 8.6.0
CVE-2026-76364
6.5
0%
Aug 19
Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR
Affected: before 8.6.0
CVE-2026-76363
6.5
0%
Aug 19
Structured Query Language Injection through the REST API in Splunk SOAR
Affected: before 8.6.0
CVE-2026-76359
6.5
1%
Aug 19
Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR
Affected: before 8.6.0
CVE-2026-76358
6.5
1%
Aug 19
Path Traversal through App Installation Tar Extraction in Splunk SOAR
Affected: before 8.6.0
CVE-2026-76406
5.9
0%
Oct 21
Information Disclosure through REST API Authentication in Splunk SOAR
Affected: before 8.7.0
CVE-2026-76370
4.3
0%
Aug 19
Information Disclosure through the REST API in Splunk SOAR
Affected: before 8.6.0
CVE-2026-76360
4.3
0%
Aug 19
Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR
Affected: before 8.6.0
CVE-2026-76367
4.0
0%
Aug 19
Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR
Affected: before 8.6.0
Showing 10