CVE-2026-76373
CVE-2026-76373: 1 tracked advisory record across Splunk. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Splunk
1 advisory- Advisory severityMedium5.4
Medium [CVE-2026-76373] Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR
CVE-2026-76373Source published Source updated
In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could inject crafted input into an Active Directory query to enumerate Active Directory objects, including accounts, groups, and organizational units, read sensitive attributes from arbitrary directory objects, and redirect account modification actions to unintended objects. For more information see Run an action in Splunk SOAR ( ).
- Affected products in this advisory
- AD LDAP app for Splunk SOAR
- Source-reported affected versions
- AD LDAP app for Splunk SOAR 2.3 before 2.3.8
- Source-reported fixed versions
- 2.3.8
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Android app · Google Play
Monitor future Splunk CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.