CVE-2026-76386
Last modified
CVE-2026-76386 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. In versions below 3.2.2 of the Zoom app for Splunk SOAR, a user who holds a role with permission to run actions could expose meeting and personal meeting ID passwords by invoking one of the create meeting, update meeting, or update user settings actions, because the affected password and pmi_password parameters are not masked and are shown in cleartext in the user interface. The information disclosure is possible because the app does not mark the affected action parameters as passwords. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
In versions below 3.2.2 of the Zoom app for Splunk SOAR, a user who holds a role with permission to run actions could expose meeting and personal meeting ID passwords by invoking one of the create meeting, update meeting, or update user settings actions, because the affected password and pmi_password parameters are not masked and are shown in cleartext in the user interface. The information disclosure is possible because the app does not mark the affected action parameters as passwords. For more information see Run an action in Splunk SOAR (https://help.splunk.com/en/splunk-soar/soar-on-premises/use-splunk-soar-on-premises/8.6.0/use-the-command-line-interface-to-perform-tasks-in-splunk-soar-on-premises/run-an-action-in-splunk-soar-on-premises).
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Splunk | Zoom app for Splunk SOAR | >= 3.2, < 3.2.2 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-76386?
How severe is CVE-2026-76386?
How do I fix CVE-2026-76386?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-76380In versions below 5.1.3 of the CrowdStrike OAuth API app for…4.3
- CVE-2026-76381In versions below 1.5.2 of the MS Graph for Active Directory…4.3
- CVE-2026-76382In versions below 3.8.5 of the Phantom app for Splunk SOAR, …4.3
- CVE-2026-76383In versions below 1.0.5 of the RSA SecurID Authentication Ma…4.3
- CVE-2026-76384In versions below 2.2.1 of the Splunk Attack Analyzer Connec…4.3
- CVE-2026-76385In versions below 2.1.4 of the Venafi app for Splunk SOAR, a…4.3
- CVE-2026-76387In Splunk Enterprise Security versions below 8.6.1, a user w…8.1
- CVE-2026-76388In Splunk Enterprise Security versions below 8.6.1, a user w…8.1
- CVE-2026-76389In Cisco Talos Intelligence for Enterprise Security Cloud ve…8.8
- CVE-2026-7639Software installed and run as a non-privileged user may cond…7.8
- CVE-2026-76390In Cisco Talos Intelligence for Enterprise Security Cloud ve…5.3
- CVE-2026-76391In Splunk AI Toolkit versions below 6.0.0, a user who does n…8.3
Are you affected by CVE-2026-76386?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST