{"id":44367,"date":"2026-10-22T08:42:25","date_gmt":"2026-10-22T00:42:25","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-76308"},"modified":"2026-10-22T08:42:25","modified_gmt":"2026-10-22T00:42:25","slug":"cve-2026-76308","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-76308","title":{"rendered":"CVE-2026-76308 [MEDIUM] &#8211; In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Sec"},"content":{"rendered":"<p>In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition through the Representational State Transfer (REST) API and cause Splunk SOAR to apply the license change.<br \/>\nThe vulnerability is possible because Splunk SOAR authenticates requests to manage the Enterprise Security edition but does not authorize the caller before it applies the license change.<br \/>\nFor more information see Using the REST API reference for Splunk SOAR (On-premises) (https:\/\/help.splunk.com\/en\/splunk-soar\/soar-on-premises\/rest-api-reference\/8.7.0\/using-the-splunk-soar-rest-api\/using-the-rest-api-reference-for-splunk-soar-on-premises), Obtain and configure a Splunk SOAR (On-premises) license (https:\/\/help.splunk.com\/en\/splunk-soar\/soar-on-premises\/administer-soar-on-premises\/8.7.0\/configure-your-companys-settings-in-splunk-soar-on-premises\/obtain-and-configure-a-splunk-soar-on-premises-license), and Integration of Splunk SOAR with Splunk Enterprise Security (https:\/\/help.splunk.com\/en\/splunk-enterprise-security-8\/administer\/8.7\/automation-with-playbooks\/integration-of-splunk-soar-with-splunk-enterprise-security) in the Splunk documentation.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition through the Representational State Transfer (REST) API and cause Splunk SOAR to apply the licens<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-44367","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/44367","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=44367"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=44367"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=44367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}