CVE-2026-76383

Name of the Vulnerable Software and Affected Versions RSA SecurID Authentication Manager app for Splunk SOAR versions prior to 1.0.5

Description A user with permissions to run actions can expose a sensitive token serial when invoking the enable token or revoke token actions. This occurs because the token serial parameter is not marked as a password, causing it to be displayed in cleartext within the user interface instead of being masked.

Recommendations Update to version 1.0.5 or later. As a temporary mitigation, restrict user roles from invoking the enable token and revoke token actions to prevent the exposure of the token serial parameter.