CVE-2026-76526: The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties at met before being read from an upstream component or sent to a downstream component. in Splunk Splunk SOAR

This vulnerability in Splunk SOAR relates to improper neutralization (CWE-707) where the product fails to properly validate or sanitize structured messages or data before reading from upstream components or sending to downstream components. This can lead to security weaknesses due to malformed or malicious data being processed. Cisco's internal review discovered multiple such issues, which were remediated in a software hardening release.

The impact involves potential security risks from processing improperly neutralized or malformed structured data, which could lead to unintended behavior or security property violations within Splunk SOAR. Specific exploitation details or impacts are not provided in the available data.

A software hardening release addressing these vulnerabilities has been made available by Cisco. Users should upgrade to version 8.7.0 or later to remediate this issue. Patch status is confirmed by the vendor advisory indicating a fix in version 8.7.0.