CVE-2026-76376

In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive AWS credentials by invoking an action that accepts the credentials parameter, because the parameter is not masked and is shown in cleartext in the user interface. The information disclosure is possible because the app does not mark the affected action parameter as a password. For more information see Run an action in Splunk SOAR (https://help.splunk.com/en/splunk-soar/soar-on-premises/use-splunk-soar-on-premises/8.6.0/use-the-command-line-interface-to-perform-tasks-in-splunk-soar-on-premises/run-an-action-in-splunk-soar-on-premises).

• CWE-312

• https://advisory.splunk.com/advisories/SVD-2026-0806

Published

Aug 19, 2026

Last Modified

Aug 20, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76370In Splunk SOAR versions below 8.6.0, an authenticated user w…4.3
• CVE-2026-76371In FireAMP versions below 2.1.15, a user who holds a role th…2.7
• CVE-2026-76372In Nmap Scanner versions below 3.0.15, a user who holds a ro…6.6
• CVE-2026-76373In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, …5.4
• CVE-2026-76374In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, …4.3
• CVE-2026-76375In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, …5
• CVE-2026-76377In versions below 2.5.3 of the Azure AD Graph app for Splunk…4.3
• CVE-2026-76378In versions below 2.4.5 of the Cisco Secure Malware Analytic…4.3
• CVE-2026-76379In versions below 2.2.1 of the Cisco Webex app for Splunk SO…4.3
• CVE-2026-7638The App Builder – Create Native Android & iOS Apps On The Fl…5.3
• CVE-2026-76380In versions below 5.1.3 of the CrowdStrike OAuth API app for…4.3
• CVE-2026-76381In versions below 1.5.2 of the MS Graph for Active Directory…4.3