Threats Tagged 'cve-2026-76384'
View all threats tagged with 'cve-2026-76384'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-76384'
Click on any threat for detailed analysis and mitigation recommendations
A vulnerability in versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR allows users with permission to run actions to see a sensitive archive password in cleartext. This occurs because the archive_password parameter in the detonate file and detonate url actions is not masked in the user interface. The issue arises from the app not marking this parameter as a password, leading to information disclosure. Join the discussion | GCVE Database | 08/20/2026, 00:35:04 UTC Added: 08/20/2026, 14:09:10 UTC |
CVE-2026-76384 affects the Splunk Attack Analyzer Connector for Splunk SOAR versions prior to 2.2.1. The vulnerability involves the exposure of a sensitive archive password in cleartext within the user interface when invoking certain actions. This occurs because the archive_password parameter is not masked or treated as a password field, allowing users with permission to run actions to see the password in cleartext. The issue is limited to versions below 2.2.1. Join the discussion | CVE Database V5 | 08/19/2026, 21:35:05 UTC Added: 08/19/2026, 21:38:38 UTC |
Showing 1 to 2 of 2 results