CVE-2026-76382

In versions below 3.8.5 of the Phantom app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive archive password by invoking the deflate item action, because the action's password parameter is not masked and is shown in cleartext in the user interface. The information disclosure is possible because the app does not mark the affected action parameter as a password. For more information see Run an action in Splunk SOAR (https://help.splunk.com/en/splunk-soar/soar-on-premises/use-splunk-soar-on-premises/8.6.0/use-the-command-line-interface-to-perform-tasks-in-splunk-soar-on-premises/run-an-action-in-splunk-soar-on-premises).

• CWE-312

• https://advisory.splunk.com/advisories/SVD-2026-0806

Published

Aug 19, 2026

Last Modified

Aug 20, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76377In versions below 2.5.3 of the Azure AD Graph app for Splunk…4.3
• CVE-2026-76378In versions below 2.4.5 of the Cisco Secure Malware Analytic…4.3
• CVE-2026-76379In versions below 2.2.1 of the Cisco Webex app for Splunk SO…4.3
• CVE-2026-7638The App Builder – Create Native Android & iOS Apps On The Fl…5.3
• CVE-2026-76380In versions below 5.1.3 of the CrowdStrike OAuth API app for…4.3
• CVE-2026-76381In versions below 1.5.2 of the MS Graph for Active Directory…4.3
• CVE-2026-76383In versions below 1.0.5 of the RSA SecurID Authentication Ma…4.3
• CVE-2026-76384In versions below 2.2.1 of the Splunk Attack Analyzer Connec…4.3
• CVE-2026-76385In versions below 2.1.4 of the Venafi app for Splunk SOAR, a…4.3
• CVE-2026-76386In versions below 3.2.2 of the Zoom app for Splunk SOAR, a u…4.3
• CVE-2026-76387In Splunk Enterprise Security versions below 8.6.1, a user w…8.1
• CVE-2026-76388In Splunk Enterprise Security versions below 8.6.1, a user w…8.1