Investigate in your agent.

Turn this advisory into a focused investigation. Ask your agent to check your project’s versions, explain the evidence, and suggest a compatible fix.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

Skip to content
cve.new Create a CVE report
Check your stack
CVE-2026-76408critical9.8

Improper Control of a Resource Through its Lifetime in Splunk SOAR

Impact

Splunk SOAR versions before 8.7.0 have an improper control of a resource through its lifetime weakness. The impact is unspecified. An attacker's required access is not stated.

Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.

What to do

Upgrade Splunk SOAR to version 8.7.0 or higher.

cisco guidance

Affected packages

This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.

Affected products

Vendor version evidence. Product records are separate from automatic dependency matching.

Splunk · cisco

Splunk SOAR

1 range
cisco version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

0 → before 8.7.0

custom versions

unaffected

unknown

Other versions: unknown

Original source description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76408 are related to improper control of a resource through its lifetime and are grouped under the Common Weakness Enumeration (CWE) CWE-664.

Inside the record

Evidence available

Package identity · not supplied
Version evidence
Remediation guidance
Weakness classification
Additional publishers

Describes the evidence in this view, not whether the product is safe.

Original records

CVE-2026-76408

View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.

cve.new JSON →

Underlying weaknesses

The source’s classification of what caused the vulnerability.

CWE-664 ↗

The software does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.

cisco

Related →
Contributing organizations · 2
cisco

Assigning organization

2026-10-21
CISA-ADP

Additional data publisher

2026-10-30

What changed

Follow changes
No substantive changes have been recorded here yet. History starts when cve.new observes a change after tracking is enabled; earlier edits are not reconstructed.

Large field values are marked as truncated previews. Original source snapshots remain retained.

References

1 sources
advisory.splunk.com/advisories/SVD-2026-1011
Security advisorycisco