CVE-2026-76371

Katalog CVE

CVSS 2.7 · Low EPSS 0,28%

Kerentanan Incorrect Permission Assignment for Critical Resource. Skor CVSS 3.1 2.7 (Low) menurut cisco.com.

Deskripsi (NVD)

In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the add listitem action in a Safe Mode playbook while that action is listed as read-only, which could allow for unauthorized changes to file lists. The vulnerability is possible because the FireAMP connector action manifest classifies the add listitem action as read-only even though the action updates file lists. For more information see Manage settings for a playbook in Splunk SOAR (https://help.splunk.com/en/splunk-soar/soar-cloud/build-playbooks/manage-playbooks-and-playbook-settings/manage-settings-for-a-playbook-in-splunk-soar-cloud) in the Splunk documentation.

Rincian

Terbit di NVD

19 Agustus 2026

Terakhir diubah

20 Agustus 2026

Status NVD

Awaiting Analysis

CVSS 3.1

2.7 (Low), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-732: Incorrect Permission Assignment for Critical Resource

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 19,1% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://advisory.splunk.com/advisories/SVD-2026-0806