Sensitive Data Exposure in AD LDAP App for Splunk SOAR
CVE-2026-76374

4.3MEDIUM

Key Information:

Vendor

Splunk
Status
Ad Ldap App For Splunk Soar
Vendor
CVE Published:
19 August 2026

What is CVE-2026-76374?

In certain versions of the AD LDAP app for Splunk SOAR, role-permitted users can inadvertently expose sensitive Active Directory response data. This occurs when actions are executed, causing private data to be logged in persistent debug logs. To mitigate these risks, it is crucial for users to upgrade to version 2.3.8 or higher, where this issue has been resolved. For detailed guidance, refer to Splunk’s documentation.

Affected Version(s)

AD LDAP app for Splunk SOAR 2.3 < 2.3.8

References

https://advisory.splunk.com/advisories/SVD-2026-0806

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Gabriel Nitu, Splunk
.