CVE-2026-76531

{
  "etk_id": "ETK-2026-2377",
  "cve_id": "CVE-2026-76531",
  "display_id": "CVE-2026-76531",
  "ghsa_id": "GHSA-prj9-h2w8-2p78",
  "euvd_id": "EUVD-2026-107634",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Externally accessible files and directories in Splunk SOAR",
  "summary": "Splunk SOAR releases earlier than 8.7.0 may expose files or directories to external parties. An attacker may be able to access exposed content when the deployment permits external access to the affected resources.",
  "mitigation": "Upgrade Splunk SOAR to version 8.7.0 or later. Restrict external access to SOAR files and directories until the upgrade is complete.",
  "vendor": "Splunk",
  "product": "Splunk SOAR",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 8.7.0"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "8.7.0"
      ],
      "package_name": "Splunk SOAR",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 98.06599373333333,
  "t0_at": "2026-10-21T22:52:20.059000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-21T22:52:20.059000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-21T22:52:20.059000+00:00",
      "url": "https://github.com/advisories/GHSA-prj9-h2w8-2p78"
    }
  }
}