CVE-2026-76527
Splunk Splunk SOAR
- Splunk Splunk SOAR
- Critical
- CVSS 9.8
- EPSS 0.13%
- Fixed version listed
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
From the CVE record.
Read the original description
CVE record
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76527 are related to improper check or handling of exceptional conditions and are grouped under the Common Weakness Enumeration (CWE) CWE-703.
What to do
Fixed version listed
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| Splunk Splunk SOAR | before 8.7.0 | 8.7.0 |
Scores and signals
- Exploitation
- No known exploitation
- Severity
- Critical, CVSS 9.8 (v3.1, scored by CISA-ADP)
- EPSS
- 0.13% chance of exploitation in the next 30 days (EPSS from FIRST, as of Oct 29, 2026)
- CISA's SSVC decision points
- Exploitation: none. Automatable: yes. Technical impact: total. As of Oct 28, 2026.
- Weakness
- CWE-703: The software does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the software.
- Vendor
- Splunk, Splunk SOAR
Timeline
- First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.