Skip to content
OpenAdvisories

Product · Splunk

Splunk On-Call (VictorOps)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-76405

    Information Disclosure through Cleartext Storage in the App Key Value Store in the Splunk On-Call (VictorOps) app

    In Splunk On-Call (VictorOps) app versions below 1.0.43 on Splunkbase, a user who does not hold the "admin" or "power" Splunk roles could read a partially masked Application Programming Interface (API) key from the App Key Value Store (KV Store). The exposure…

    Splunk Splunk On-Call (VictorOps)