CVE-2026-76531: The product makes files or directories accessible to unauthorized actors, even though they should not be. in Splunk Splunk SOAR

CVE-2026-76531 concerns a security flaw in Splunk SOAR where files or directories are accessible to unauthorized external parties, violating intended access restrictions. Cisco discovered this issue during an internal security review and released a software hardening update to address multiple vulnerabilities, including this one. The vulnerability is categorized under CWE-552, which involves exposure of files or directories to unauthorized actors. The affected versions include all versions from 0 up to but not including 8.7.0.

Unauthorized actors may gain access to files or directories that should be protected, potentially exposing sensitive information or enabling further attacks. The exact impact depends on the nature of the accessible files or directories but generally represents a breach of confidentiality and security policy.

A software hardening release addressing this vulnerability has been made available by Cisco. Users should upgrade to version 8.7.0 or later to remediate this issue. Since this is not a cloud service, remediation requires applying the vendor's patch. No known exploits are reported in the wild at this time.