# CVE-2026-76362: Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR

> CVE-2026-76362: Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR. CVSS 7.4 (CVSS 3.1).

Canonical: https://rewindex.com/cve/CVE-2026-76362
Last updated: 2026-08-21T14:55:01Z

- Published: 2026-08-19 21:34 UTC · Updated: 2026-08-21 14:55 UTC · Assigner: cisco
- CVSS: 7.4 (CVSS 3.1) · Severity: High · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- EPSS: 0.21%, 12th percentile (scored 2026-10-25)
- CISA KEV: no
- CWE: CWE-295

## Description

In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffic between Splunk SOAR and a configured CyberArk Representational State Transfer (REST) server could access or modify all relevant data exchanged through that credential manager. The vulnerability is possible because the CyberArk REST client does not verify server certificates by default. The attack requires the attacker to have network-path interception capability between Splunk SOAR and the configured CyberArk REST server. For more information see Manage your organization's credentials with a password vault (https://help.splunk.com/en/splunk-soar/soar-cloud/administer-soar-cloud/configure-administration-settings-in-splunk-soar-cloud/manage-your-organizations-credentials-with-a-password-vault) in the Splunk documentation.

## Affected vendors and products

- Splunk: Splunk SOAR

## Tracked companies

- [Splunk](https://rewindex.com/company/splunk.md)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2026-76362)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2026-76362)
- [https://advisory.splunk.com/advisories/SVD-2026-0804](https://advisory.splunk.com/advisories/SVD-2026-0804)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2026-76362 · Markdown: https://rewindex.com/cve/CVE-2026-76362.md · JSON: https://rewindex.com/api/v1/cves/CVE-2026-76362 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T02:13:47.425Z