Third-Party Package Updates in Splunk SOAR - October 2026

Advisory ID: SVD-2026-1012

CVE ID: CVE-2026-6472 CVE-2026-6473 CVE-2026-6474 CVE-2026-6475 CVE-2026-6476 CVE-2026-6477 CVE-2026-6478 CVE-2026-6479 CVE-2026-6575 CVE-2026-6637 CVE-2026-6638 CVE-2026-48522 CVE-2026-48523 CVE-2026-48525 CVE-2026-48526 CVE-2026-34073 CVE-2026-39892 CVE-2026-69248 CVE-2026-69249 CVE-2026-45409 CVE-2025-69277 CVE-2026-4539 CVE-2024-34062 CVE-2026-0994 CVE-2026-6321 CVE-2026-6322 CVE-2026-13676 CVE-2026-12143 CVE-2026-25990 CVE-2026-40192 CVE-2026-42308 CVE-2026-42309 CVE-2026-42310 CVE-2026-42311 CVE-2026-54058 CVE-2026-54059 CVE-2026-54060 CVE-2026-55379 CVE-2026-55380 CVE-2026-55798 CVE-2026-59197 CVE-2026-59198 CVE-2026-59199 CVE-2026-59200 CVE-2026-59203 CVE-2026-59204 CVE-2026-59205 CVE-2025-13465 CVE-2026-4800

Published: 2026-10-21

Last Update: 2026-10-21

Description

Splunk remedied common vulnerabilities and exposures (CVEs) in third-party packages in Splunk SOAR version 8.7.0 or higher.

Package	Remediation	CVE	Severity
postgresl₁	Upgraded postgresl to version 15.18	Multiple	High
PyJWT₂	Upgraded PyJWT to version 2.13.0	Multiple	High
cryptography₃	Upgraded cryptography to version 48.0.1	Multiple	Medium
cryptography₄	Upgraded cryptography to version 49.0.0	Multiple	Medium
idna₅	Upgraded idna to version 3.15.0	CVE-2026-45409	Medium
PyNaCl₆	Upgraded PyNaCl to version 1.6.2	CVE-2025-69277	Medium
Pygments₇	Upgraded Pygments to version 2.20.0	CVE-2026-4539	Low
tqdm₈	Upgraded tqdm to version 4.66.3	CVE-2024-34062	Low
protobuf₉	Upgraded protobuf to version 6.33.6	CVE-2026-0994	High
fast-uri₁₀	Upgraded fast-uri to version 3.1.3	Multiple	High
form-data₁₁	Upgraded form-data to version 4.0.6	CVE-2026-12143	High
pillow₁₂	Upgraded pillow to version 12.3.0	Multiple	High
lodash-es₁₃	Upgraded lodash-es to version 4.18.1	Multiple	High

₁ Upgraded postgresl to remedy CVE-2026-6472, CVE-2026-6473, CVE-2026-6474, CVE-2026-6475, CVE-2026-6476, CVE-2026-6477, CVE-2026-6478, CVE-2026-6479, CVE-2026-6575, CVE-2026-6637, and CVE-2026-6638 in Splunk SOAR 8.7.0.

₂ Upgraded PyJWT to remedy CVE-2026-48522, CVE-2026-48523, CVE-2026-48525, and CVE-2026-48526 in Splunk SOAR 8.7.0.

₃ Upgraded cryptography to remedy CVE-2026-34073, and CVE-2026-39892 at sorcery/dependencies/automation_3.9, sorcery/dependencies/old_platform, sorcery/dependencies/workspaces/automation_3.9, and sorcery/dependencies/workspaces/platform.

₄ Upgraded cryptography to remedy CVE-2026-34073, CVE-2026-39892, CVE-2026-69248, and CVE-2026-69249 at sorcery/dependencies/automation_3.13 and sorcery/dependencies/workspaces/automation_3.13.

₅ Upgraded idna to remedy CVE-2026-45409.

₆ Upgraded PyNaCl to remedy CVE-2025-69277.

₇ Upgraded Pygments to remedy CVE-2026-4539.

₈ Upgraded tqdm to remedy CVE-2024-34062.

₉ Upgraded protobuf to remedy CVE-2026-0994.

₁₀ Upgraded fast-uri to remedy CVE-2026-6321, CVE-2026-6322, and CVE-2026-13676.

₁₁ Upgraded form-data to remedy CVE-2026-12143.

₁₂ Upgraded pillow to remedy CVE-2026-25990, CVE-2026-40192, CVE-2026-42308, CVE-2026-42309, CVE-2026-42310, CVE-2026-42311, CVE-2026-54058, CVE-2026-54059, CVE-2026-54060, CVE-2026-55379, CVE-2026-55380, CVE-2026-55798, CVE-2026-59197, CVE-2026-59198, CVE-2026-59199, CVE-2026-59200, CVE-2026-59203, CVE-2026-59204, and CVE-2026-59205.

₁₃ Upgraded lodash-es to remedy CVE-2025-13465, and CVE-2026-4800.

Solution

Upgrade Splunk SOAR to version 8.7.0 or higher.

Product Status

Product	Base Version	Affected Version	Fix Version
Splunk SOAR	8.7	Below 8.7.0	8.7.0

Severity

Unless otherwise stated, Splunk adopts the vendor’s severity rating first, if available, or the National Vulnerability Database (NVD)’s rating, otherwise.