{"metadata": {"vulnerability": "cve-2026-76304", "count": 22, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 14}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0457", "record": "NCSC-2026-0457", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-19T12:02:03.623Z", "date_only": false, "value": "2026-08-19T12:02:03.623Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-76304", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "cve-2026-76304", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": true, "value": "2026-10-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1366", "record": "CERTFR-2026-AVI-1366", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-21T22:52:05.722Z", "date_only": false, "value": "2026-10-21T22:52:05.722Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-76304", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-21T22:52:05.722Z", "date_only": false, "value": "2026-10-21T22:52:05.722Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "cve-2026-76304", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-21T23:05:31.889Z", "date_only": false, "value": "2026-10-21T23:05:31.889495Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117481401865083208", "record": "CVE-2026-76304", "field": "creation_timestamp", "uuid": "ae02c0bd-31c3-45e9-8f58-6920c5424361", "content": "CVE-2026-76304 Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Automation Brokers could download the Splunk SOAR Automation Broker Docker Compose configuration file. The file contains the Uniform Resource Locator (URL) of the Splunk SOAR instance, the container image location, and the Splunk SOAR Automation Broker version.The vulnerability is possible because Splunk SOAR returns the configuration file without enforcing the Automation Broker edit permission.For more information see Install Splunk Automation Broker on a Docker host (https://help.splunk.com/en/splunk-soar/splunk-automation-broker/install-and-create-classic-splunk-soar-automation-brokers/install-splunk-automation-broker-on-a-docker-host) and Manage roles and permissions in Splunk SOAR (On-premises) (https://help.splunk.com/en/splunk-soar/soar-on-premises/administer-soar-on-premises/8.5.0/manage-your-splunk-soar-on-premises-users-and-accounts/manage-roles-and-permissions-in-splunk-soar-on-premises) in the Splunk documentation.\nhttps://www.cve.org/CVERecord?id=CVE-2026-76304https://advisory.splunk.com/advisories/SVD-2026-1010#splunk #Splunk #SplunkSOAR#CVE_2026_76304#bot", "url": "https://infosec.exchange/users/cve/statuses/117481401865083208"}, {"timestamp": "2026-10-21T23:17:28Z", "date_only": false, "value": "2026-10-21T23:17:28Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V2F8-FVMQ-5MRH", "record": "GHSA-V2F8-FVMQ-5MRH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-21T23:17:28.517Z", "date_only": false, "value": "2026-10-21T23:17:28.517", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76304", "record": "FKIE_CVE-2026-76304", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1366", "record": "CERTFR-2026-AVI-1366", "field": "last_revision_date"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1366", "record": "CERTFR-2026-AVI-1366", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1366", "record": "CERTFR-2026-AVI-1366", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-22T00:32:01Z", "date_only": false, "value": "2026-10-22T00:32:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V2F8-FVMQ-5MRH", "record": "GHSA-V2F8-FVMQ-5MRH", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-22T00:32:01Z", "date_only": false, "value": "2026-10-22T00:32:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V2F8-FVMQ-5MRH", "record": "GHSA-V2F8-FVMQ-5MRH", "field": "modified"}, {"timestamp": "2026-10-26T15:38:43.466Z", "date_only": false, "value": "2026-10-26T15:38:43.466261Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-76304", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-26T15:38:43.466Z", "date_only": false, "value": "2026-10-26T15:38:43.466261Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76304", "record": "FKIE_CVE-2026-76304", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-26T16:46:46.904Z", "date_only": false, "value": "2026-10-26T16:46:46.904Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-76304", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-26T16:46:46.904Z", "date_only": false, "value": "2026-10-26T16:46:46.904Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-76304", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T17:17:29.373Z", "date_only": false, "value": "2026-10-26T17:17:29.373", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76304", "record": "FKIE_CVE-2026-76304", "field": "lastModified"}, {"timestamp": "2026-10-28T09:12:56.548Z", "date_only": false, "value": "2026-10-28T09:12:56.548898Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0457", "record": "NCSC-2026-0457", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-28T09:12:56.548Z", "date_only": false, "value": "2026-10-28T09:12:56.548898Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0457", "record": "NCSC-2026-0457", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T09:12:56.548Z", "date_only": false, "value": "2026-10-28T09:12:56.548898Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0457", "record": "NCSC-2026-0457", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-10-29T04:59:22.824Z", "anchors": {"origin": {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "cve-2026-76304", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "cve-2026-76304", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 709162.824154, "hours": 196.9896733761111, "days": 8.207903057337964, "min_seconds": 622762.824154, "max_seconds": 709162.824154, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "cve-2026-76304", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T04:59:22.824Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}