EUVD-2026-107648

In Splunk SOAR versions below 8.7.0, a user that holds a role with the installapps capability could store attacker-controlled content that Splunk SOAR displays in app documentation by installing an app. If another user who holds a role with permission to view apps opens the app documentation,...