This vulnerability in Splunk SOAR stems from an improper check or handling of exceptional conditions, a weakness identified as CWE‑703. The flaw can cause the software to react unexpectedly when an error state is entered, potentially leading to a loss of service or other unintended behavior. The nature of the defect suggests that an attacker could trigger it by supplying specially crafted input that forces the application into an exceptional state.

The defect impacts Splunk SOAR, with no specific version range listed in the advisory. Administrators should verify whether their installations run an earlier version than the recommended 8.7.0, as the vendor advises upgrading to that release or later to remediate the issue.

The CVE report assigns a CVSS score of 9.8, indicating a high severity of remote denial‑of‑service or other unintended behavior. The EPSS score is below 1 %, suggesting low but non‑zero exploitation probability at present. The vulnerability is not listed in CISA's KEV catalog, so no known exploits are publicly documented. Based on the description, the likely attack vector is remote, inferred from the typical use of Splunk SOAR; an attacker would need to provide crafted input to trigger the exceptional condition that leads to a service disruption or crash. Until the vendor’s recommended update to version 8.7.0 or later is applied, affected systems remain exposed to this high‑risk flaw.