PT-2026-78813 · Splunk · Zoom App For Splunk Soar

CVE-2026-76386

·

Published

2026-08-19

·

Updated

2026-08-19

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Zoom app for Splunk SOAR versions prior to 3.2.2
Description A user with permissions to run actions can expose meeting and personal meeting ID passwords. This occurs when invoking the create meeting, update meeting, or update user settings actions, as the password and pmi password parameters are not masked and appear in cleartext within the user interface. The issue stems from the application failing to mark these specific action parameters as passwords.
Recommendations Update to version 3.2.2 or later.

Fix

Cleartext Storage of Sensitive Information

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-76386

Affected Products

Zoom App For Splunk Soar