PT-2026-78791 · Splunk · Splunk Soar
CVE-2026-76364
·
Published
2026-08-19
·
Updated
2026-08-21
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Splunk SOAR versions prior to 8.6.0
Description
A user with the Automation Engineer role can execute arbitrary Structured Query Language (SQL) statements against the database via custom function results. This occurs because the system constructs database lookups using a supplied name rather than a bound SQL value, which can lead to unauthorized access to all stored data and compromise system integrity.
Recommendations
Update to version 8.6.0 or later.
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Splunk Soar