CVE-2026-76378— Information Disclosure through Action Parameters in Cisco Secure Malware Analytics app for Splunk SOAR

Quick assessment

Copy summary Copy citation

Affected

Splunk Cisco Secure Malware Analytics app for Splunk SOAR

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Splunk SOAR 的 Cisco Secure Malware Analytics 应用的低于 2.4.5 版本中，拥有执行操作权限的用户可以通过调用“检测文件”（detonate file）操作，暴露敏感的样本密码。这是因为该操作的 sample_password 参数未被掩码处理，在用户界面中以明文形式显示。由于该应用未将受影响的动作参数标记为密码字段，因此导致了信息泄露。有关详情，请参阅《在 Splunk SOAR 中执行操作》（https://help.splunk.com/en/splunk-s

CVE-2026-76378 affects Splunk Cisco Secure Malware Analytics app for Splunk SOAR. No confirmed in-the-wild exploitation; assess based on exposure. 在 Splunk SOAR 的 Cisco Secure Malware Analytics 应用的低于 2.4.5 版本中，拥有执行操作权限的用户可以通过调用“检测文件”（detonate file）操作，暴露敏感的样本密码。这是因为该操作的 sample_password 参数未被掩码处理，在用户界面中以明文形式显示。由于该应用未将受影响的动作参数标记为 CVE-2026-76378 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-76378

I. Basic Information for CVE-2026-76378

Affected Products

II. Public POCs for CVE-2026-76378

III. Intelligence Information for CVE-2026-76378

Vendor Advisories for CVE-2026-76378 (1)

• 🔗 SVD-2026-0806 | Splunk Vulnerability Disclosure Read full article

• https://www.cve.org/CVERecord?id=CVE-2026-76378

Same Patch Batch · Splunk · 2026-08-19 · 110 CVEs total

Showing top 20 of 110 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2026-76378