CVE-2026-76379

Name of the Vulnerable Software and Affected Versions Cisco Webex app for Splunk SOAR versions prior to 2.2.1

Description A user with permissions to run actions can expose a sensitive meeting password by invoking the schedule meeting action. This occurs because the password parameter is not masked and is displayed in cleartext within the user interface, as the application fails to mark this specific parameter as a password.

Recommendations Update to version 2.2.1 or later. As a temporary mitigation, restrict user permissions to prevent unauthorized roles from invoking the schedule meeting action.