CERT24CVE-2026-76406 — Information Disclosure through REST API Authentication in Splunk SOARLoading data…
CERT24Threat Observatory
Period

CVE-2026-76406 — Information Disclosure through REST API Authentication in Splunk SOAR

In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected instance could use the REST API to expose and decrypt that data.

← Back to intelligence

CVE-2026-76406 — Information Disclosure through REST API Authentication in Splunk SOAR

In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected instance could use the REST API to expose and decrypt that data.