CVE-2026-76408: Improper Control of a Resource Through its Lifetime in Splunk SOAR

Published Oct 21, 2026

Updated

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76408 are related to improper control of a resource through its lifetime and are grouped under the Common Weakness Enumeration (CWE) CWE-664.

Affected Software

1 affected component

Splunk Splunk SOAR

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Splunk SOAR to a version that resolves this vulnerability.
Fixed in 8.7.0

Event History

Oct 21, 2026

CVE Published

via MITRE·10:52 PM

Data Sourced

via MITRE·10:52 PM

RemedyDescriptionWeakness

Frequently Asked Questions

Does the available information identify affected versions or configurations?

No. The provided information names Splunk SOAR but does not specify affected versions, deployment configurations, or whether default installations are affected.

Is a remediation mentioned for this issue?

Yes. Cisco states that a software hardening release addresses the internally discovered vulnerabilities, but the provided information does not identify the release version or give mitigation steps.