CVE-2026-76382 | Splunk Phantom up to 3.8.4 Deflate Item Action Password missing encryption

August 19, 2026 Yanac

A vulnerability identified as problematic has been detected in Splunk Phantom up to 3.8.4. Affected is an unknown function of the component Deflate Item Action. This manipulation of the argument Password causes missing encryption of sensitive data.

This vulnerability is registered as CVE-2026-76382. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More