agentprime: splunk-soarEvery new CVE for splunk-soar.https://agentprime.io/CVE-2026-76531: Files or Directories Accessible to External Parties in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76531/https://agentprime.io/advisories/CVE-2026-76531/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:20 GMTCVEcriticalCVE-2026-76530: Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76530/https://agentprime.io/advisories/CVE-2026-76530/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:19 GMTCVECVE-2026-76529: Improper Protection of Alternate Path in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76529/https://agentprime.io/advisories/CVE-2026-76529/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:18 GMTCVEcriticalCVE-2026-76528: Protection Mechanism Failure in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76528/https://agentprime.io/advisories/CVE-2026-76528/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:17 GMTCVEcriticalCVE-2026-76527: Improper Check or Handling of Exceptional Conditions in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76527/https://agentprime.io/advisories/CVE-2026-76527/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:16 GMTCVEcriticalCVE-2026-76526: Improper Neutralization in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76526/https://agentprime.io/advisories/CVE-2026-76526/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:15 GMTCVECVE-2026-76408: Improper Control of a Resource Through its Lifetime in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76408/https://agentprime.io/advisories/CVE-2026-76408/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:14 GMTCVEcriticalCVE-2026-76407: Improper Access Control in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76407/https://agentprime.io/advisories/CVE-2026-76407/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:13 GMTCVEcriticalCVE-2026-76406: Information Disclosure through REST API Authentication in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76406/https://agentprime.io/advisories/CVE-2026-76406/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:12 GMTCVECVE-2026-76308: Missing Authorization through the REST API in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76308/https://agentprime.io/advisories/CVE-2026-76308/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:11 GMTCVECVE-2026-76307: Sensitive Information Disclosure through REST API Query Filters in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76307/https://agentprime.io/advisories/CVE-2026-76307/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:10 GMTCVECVE-2026-76306: Information Disclosure through REST API Query Filters in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76306/https://agentprime.io/advisories/CVE-2026-76306/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:09 GMTCVECVE-2026-76305: Improper Access Control during App Downloads in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76305/https://agentprime.io/advisories/CVE-2026-76305/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:06 GMTCVECVE-2026-76304: Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76304/https://agentprime.io/advisories/CVE-2026-76304/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:05 GMTCVECVE-2026-76303: Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76303/https://agentprime.io/advisories/CVE-2026-76303/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 22:52:04 GMTCVECVE-2026-76370: Information Disclosure through the REST API in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76370/https://agentprime.io/advisories/CVE-2026-76370/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:57 GMTCVECVE-2026-76369: Path Traversal through Automation Broker in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76369/https://agentprime.io/advisories/CVE-2026-76369/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:56 GMTCVECVE-2026-76368: Missing Authorization through Playbooks in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76368/https://agentprime.io/advisories/CVE-2026-76368/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:55 GMTCVECVE-2026-76367: Stored Cross-Site Scripting (XSS) through Notes in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76367/https://agentprime.io/advisories/CVE-2026-76367/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:55 GMTCVECVE-2026-76366: Information Disclosure through the REST API in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76366/https://agentprime.io/advisories/CVE-2026-76366/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:54 GMTCVECVE-2026-76365: Structured Query Language (SQL) Injection through Custom Lists in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76365/https://agentprime.io/advisories/CVE-2026-76365/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:54 GMTCVECVE-2026-76364: Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76364/https://agentprime.io/advisories/CVE-2026-76364/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:53 GMTCVECVE-2026-76363: Structured Query Language Injection through the REST API in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76363/https://agentprime.io/advisories/CVE-2026-76363/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:52 GMTCVECVE-2026-76362: Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76362/https://agentprime.io/advisories/CVE-2026-76362/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:52 GMTCVECVE-2026-76361: Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76361/https://agentprime.io/advisories/CVE-2026-76361/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:51 GMTCVECVE-2026-76360: Information Disclosure through Missing Authorization in the Health REST API in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76360/https://agentprime.io/advisories/CVE-2026-76360/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:51 GMTCVECVE-2026-76359: Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76359/https://agentprime.io/advisories/CVE-2026-76359/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:50 GMTCVECVE-2026-76358: Path Traversal through App Installation Tar Extraction in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76358/https://agentprime.io/advisories/CVE-2026-76358/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:49 GMTCVECVE-2026-76357: Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76357/https://agentprime.io/advisories/CVE-2026-76357/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:49 GMTCVECVE-2026-76356: Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-76356/https://agentprime.io/advisories/CVE-2026-76356/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 21:34:48 GMTCVECVE-2026-20260: Log Injection through HTTP Request Paths in Splunk SOARhttps://agentprime.io/advisories/CVE-2026-20260/https://agentprime.io/advisories/CVE-2026-20260/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 17:16:20 GMTCVE