Cisco Improper Access Control Vulnerability (CWE-284) - CVE-2026-76407
CVE-2026-76407 Published on October 21, 2026
Improper Access Control in Splunk SOAR
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76407 are related to improper access control and are grouped under the Common Weakness Enumeration (CWE) CWE-284.
Weakness Type
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2026-76407 has been classified to as an Authorization vulnerability or weakness.
Affected Versions
Splunk SOAR:- Before 8.7.0 is affected.