CVE-2026-76405
CVE-2026-76405: 1 tracked advisory record across Splunk. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Splunk
1 advisory- Advisory severityMedium4.3
Medium [CVE-2026-76405] Information Disclosure through Cleartext Storage in the App Key Value Store in the Splunk On-Call (VictorOps) app
CVE-2026-76405Source published Source updated
In Splunk On-Call (VictorOps) app versions below 1.0.43 on Splunkbase, a user who does not hold the "admin" or "power" Splunk roles could read a partially masked Application Programming Interface (API) key from the App Key Value Store (KV Store). The exposure is possible because the Splunk On-Call (VictorOps) app does not fully mask the API key before storing it in a KV Store collection that the user can read. For more information see About the app key value store ( ) in the Splunk documentation.
- Affected products in this advisory
- Splunk On-Call (VictorOps)
- Source-reported affected versions
- Splunk On-Call (VictorOps) 1.0 before 1.0.43
- Source-reported fixed versions
- 1.0.43
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Android app · Google Play
Monitor future Splunk CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.