CVE-2026-76384

Name of the Vulnerable Software and Affected Versions Splunk Attack Analyzer Connector for Splunk SOAR versions prior to 2.2.1

Description A user with permissions to run actions can expose a sensitive archive password through the user interface. This occurs when invoking the detonate file or detonate url actions, as the archive password parameter is not masked and is displayed in cleartext. The issue stems from the application failing to mark the affected parameter as a password.

Recommendations Update to version 2.2.1 or later. Avoid using the archive password parameter in the detonate file and detonate url actions until the update is applied.