CVE-2026-76305

Splunk SOAR versions below 8.7.0 are vulnerable to an improper access control issue (CWE-862) where the system fails to verify permissions before returning an app archive. An authenticated user without the necessary permissions to view apps can download these archives, potentially exposing propri...