CVE-2026-76281
published 2026-10-07CVE-2026-76281: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
PriorityP430medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
0.20%
9.8th percentile
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76281 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| splunk | splunk | >= 10.0.0 < 10.0.10 | 10.0.10 |
| splunk | splunk | >= 10.2.0 < 10.2.7 | 10.2.7 |
| splunk | splunk | >= 10.4.0 < 10.4.3 | 10.4.3 |
| splunk | splunk | >= 9.4.0 < 9.4.15 | 9.4.15 |
| splunk | splunk_enterprise | >= 10.0 < 10.0.10 | 10.0.10 |
| splunk | splunk_enterprise | >= 10.2 < 10.2.7 | 10.2.7 |
| splunk | splunk_enterprise | >= 10.4 < 10.4.3 | 10.4.3 |
| splunk | splunk_enterprise | >= 9.4 < 9.4.15 | 9.4.15 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Splunk Enterprise up to 9.4.14/10.0.9/10.2.6/10.4.2 access control
vuldb·2026-10-07
CVE-2026-76281 Splunk Enterprise up to 9.4.14/10.0.9/10.2.6/10.4.2 access control
A vulnerability identified as very critical has been detected in Splunk Enterprise up to 9.4.14/10.0.9/10.2.6/10.4.2. This vulnerability affects unknown code. This manipulation causes improper access controls.
This vulnerability is registered as CVE-2026-76281. Remote exploitation of the attack is possible. No exploit is available.
You should upgrade the affected component.
GHSA
Improper Access Control.
ghsa_unreviewed·2026-10-07
CVE-2026-76281 [MEDIUM] CWE-284 Improper Access Control.
Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.
No detection rules found.
No public exploits indexed.
2026-10-07
Published