CVE-2026-76379

Received Received - Intake

Information Disclosure in Cisco Webex Splunk SOAR App

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: Cisco Systems, Inc.

Description

In versions below 2.2.1 of the Cisco Webex app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive meeting password by invoking the schedule meeting action, because the action's password parameter is not masked and is shown in cleartext in the user interface. The information disclosure is possible because the app does not mark the affected action parameter as a password. For more information see Run an action in Splunk SOAR (https://help.splunk.com/en/splunk-soar/soar-on-premises/use-splunk-soar-on-premises/8.6.0/use-the-command-line-interface-to-perform-tasks-in-splunk-soar-on-premises/run-an-action-in-splunk-soar-on-premises).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-19

Generated

2026-08-20

AI Q&A

2026-08-20

EPSS Evaluated

N/A

NVD

CVE-2026-76379

EUVD

EUVD-2026-62944

Affected Vendors & Products

Vendor	Product	Version / Range
cisco	webex_app	to 2.2.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-312	The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Cisco Webex app for Splunk SOAR versions below 2.2.1. A user with permission to run actions can view a sensitive meeting password in cleartext through the user interface because the password parameter is not masked during the schedule meeting action.

Detection Guidance

Check if your Cisco Webex app for Splunk SOAR version is below 2.2.1. Review logs for actions involving meeting scheduling to see if passwords are exposed in cleartext in the UI.

Impact Analysis

An attacker with access to the system could potentially view meeting passwords, leading to unauthorized access to confidential meetings or sensitive information shared during those meetings.

Compliance Impact

This vulnerability could lead to unauthorized disclosure of sensitive meeting data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements by exposing confidential information.

Mitigation Strategies

Upgrade the Cisco Webex app for Splunk SOAR to version 2.2.1 or later. Restrict user roles to only those necessary for their tasks to limit exposure.

Hi! I’m here to help you understand CVE-2026-76379. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70