Network Traffic Vulnerability in Splunk SOAR Affected by CyberArk REST Server Misconfiguration

CVE-2026-76362

What is CVE-2026-76362?

In versions prior to 8.6.0 of Splunk SOAR, an unauthenticated user could potentially intercept or manipulate network traffic with a configured CyberArk REST server. This vulnerability arises because the CyberArk REST client does not perform server certificate validation by default. An attacker with the necessary access to network pathways could exploit this flaw to gain unauthorized access to sensitive data exchanged through the credential management system, posing a significant risk to data integrity and user privacy.

References