---
id: CVE-2026-76526
title: Improper Neutralization in Splunk SOAR
summary: >-
  As part of Cisco's ongoing commitment to proactive security and product
  quality, Cisco has conducted a comprehensive internal security review. This
  review resulted in a software hardening release that addresses multiple
  internally discov…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: adp
cwe:
  - CWE-707
vendor: Splunk
product: Splunk SOAR
affected:
  - soar < 8.7.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-26T15:38:17.305876Z'
published: '2026-10-21'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T15:38:20.704Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-76526'
references:
  - url: 'https://advisory.splunk.com/advisories/SVD-2026-1011'
tags:
  - cve.org
epss: 0.00358
epssPercentile: 0.29375
ingestedAt: '2026-10-21T23:20:10.321Z'
---

## Overview

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76526 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.

## Affected

- `soar < 8.7.0`

## Remediation

Upgrade Splunk SOAR to version 8.7.0 or higher.