EUVD-2026-107648

In Splunk SOAR versions below 8.7.0, a user that holds a role with the installapps capability could store attacker-controlled content that Splunk SOAR displays in app documentation by installing an app. If another user who holds a role with permission to view apps opens the app documentation,...

CVE-2026-76303

In Splunk SOAR versions below 8.7.0 , a Stored Cross-Site Scripting (XSS) vulnerability exists because the application fails to sanitize app documentation content. An attacker with the install_apps capability can install an app containing malicious content. If a user with permission to view apps ...

CVE-2025-5817

creationtimestamp| type| source ---|---|--- 2025-07-02 08:57:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxtthku5k2r...