{"affected":[{"product":"Splunk SOAR","source":"CNA: cisco","vendor":"Splunk","versions":[{"lessThan":"8.7.0","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-76407","cwes":["CWE-284"],"description":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76407 are related to improper access control and are grouped under the Common Weakness Enumeration (CWE) CWE-284.","epss":{"date":"2026-11-02","percentile":0.02339,"score":0.00127},"exploits":[],"kev":null,"metrics":[{"score":9.8,"severity":"critical","source":"ADP: CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},{"score":9.8,"severity":"critical","source":"NVD: 134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793654259220,"publishedAt":1792623133446,"references":[{"source":"CNA: cisco","tags":[],"url":"https://advisory.splunk.com/advisories/SVD-2026-1011"},{"source":"psirt@cisco.com","tags":[],"url":"https://advisory.splunk.com/advisories/SVD-2026-1011"}],"remediation":[{"kind":"fix","source":"CNA: cisco","text":"Upgrade Splunk SOAR to version 8.7.0 or higher."}],"revision":"8b1d8b20673ae2571bbe5112068c9d5178cae50896bc498503b8c3204ab3c7ae","sources":[{"modifiedAt":1793653841462,"name":"CNA: cisco","retrievedAt":1793657336629,"url":"https://www.cve.org/CVERecord?id=CVE-2026-76407"},{"modifiedAt":1793654259220,"name":"NVD","retrievedAt":1793665309589,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76407"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793657340425,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-76407"}],"ssvc":{"assessedAt":1793653827266,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Improper Access Control in Splunk SOAR","updatedAt":1793665309589}