CVE-2026-76379
Last modified
CVE-2026-76379 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. In versions below 2.2.1 of the Cisco Webex app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive meeting password by invoking the schedule meeting action, because the action's password parameter is not masked and is shown in cleartext in the user interface. The information disclosure is possible because the app does not mark the affected action parameter as a password. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
In versions below 2.2.1 of the Cisco Webex app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive meeting password by invoking the schedule meeting action, because the action's password parameter is not masked and is shown in cleartext in the user interface. The information disclosure is possible because the app does not mark the affected action parameter as a password. For more information see Run an action in Splunk SOAR (https://help.splunk.com/en/splunk-soar/soar-on-premises/use-splunk-soar-on-premises/8.6.0/use-the-command-line-interface-to-perform-tasks-in-splunk-soar-on-premises/run-an-action-in-splunk-soar-on-premises).
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Splunk | Cisco Webex app for Splunk SOAR | >= 2.2, < 2.2.1 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-76379?
How severe is CVE-2026-76379?
How do I fix CVE-2026-76379?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-76373In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, …5.4
- CVE-2026-76374In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, …4.3
- CVE-2026-76375In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, …5
- CVE-2026-76376In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, …4.3
- CVE-2026-76377In versions below 2.5.3 of the Azure AD Graph app for Splunk…4.3
- CVE-2026-76378In versions below 2.4.5 of the Cisco Secure Malware Analytic…4.3
- CVE-2026-7638The App Builder – Create Native Android & iOS Apps On The Fl…5.3
- CVE-2026-76380In versions below 5.1.3 of the CrowdStrike OAuth API app for…4.3
- CVE-2026-76381In versions below 1.5.2 of the MS Graph for Active Directory…4.3
- CVE-2026-76382In versions below 3.8.5 of the Phantom app for Splunk SOAR, …4.3
- CVE-2026-76383In versions below 1.0.5 of the RSA SecurID Authentication Ma…4.3
- CVE-2026-76384In versions below 2.2.1 of the Splunk Attack Analyzer Connec…4.3
Are you affected by CVE-2026-76379?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST