PT-2026-78795 · Splunk · Splunk Soar

CVE-2026-76368

·

Published

2026-08-19

·

Updated

2026-08-21

CVSS v3.1

2.7

Low

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0
Description A user with a role containing the playbooks:view permission can access metadata regarding a playbook repository they are not authorized to view. This occurs because the Playbook History feature fails to verify repository permissions before returning playbook revision metadata.
Recommendations Update to version 8.6.0 or later.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-76368

Affected Products

Splunk Soar