CERT24CVE-2026-76305 — Improper Access Control During App Downloads in Splunk SOARLoading data…
CERT24Threat Observatory
Period

CVE-2026-76305 — Improper Access Control During App Downloads in Splunk SOAR

In Splunk SOAR versions below 8.7.0, an authenticated user whose role lacked permission to view apps could download an archive of an installed app. This could expose all data in the archive, including proprietary source code and sensitive information.

← Back to intelligence

CVE-2026-76305 — Improper Access Control During App Downloads in Splunk SOAR

In Splunk SOAR versions below 8.7.0, an authenticated user whose role lacked permission to view apps could download an archive of an installed app. This could expose all data in the archive, including proprietary source code and sensitive information.