CVE-2026-76282
published 2026-10-07CVE-2026-76282: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
PriorityP356high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.30%
21.2th percentile
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76282 are related to improper control of a resource through its lifetime and are grouped under the Common Weakness Enumeration (CWE) CWE-664.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| splunk | splunk | >= 10.0.0 < 10.0.10 | 10.0.10 |
| splunk | splunk | >= 10.2.0 < 10.2.7 | 10.2.7 |
| splunk | splunk | >= 10.4.0 < 10.4.3 | 10.4.3 |
| splunk | splunk | >= 9.4.0 < 9.4.15 | 9.4.15 |
| splunk | splunk_enterprise | >= 10.0 < 10.0.10 | 10.0.10 |
| splunk | splunk_enterprise | >= 10.2 < 10.2.7 | 10.2.7 |
| splunk | splunk_enterprise | >= 10.4 < 10.4.3 | 10.4.3 |
| splunk | splunk_enterprise | >= 9.4 < 9.4.15 | 9.4.15 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Improper Control of a Resource Through its Lifetime.
ghsa_unreviewed·2026-10-07
CVE-2026-76282 [HIGH] CWE-664 Improper Control of a Resource Through its Lifetime.
Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.
VulDB
Splunk Enterprise up to 9.4.14/10.0.9/10.2.6/10.4.2 allocation of resources
vuldb·2026-10-07
CVE-2026-76282 Splunk Enterprise up to 9.4.14/10.0.9/10.2.6/10.4.2 allocation of resources
A vulnerability, which was classified as very critical, was found in Splunk Enterprise up to 9.4.14/10.0.9/10.2.6/10.4.2. Affected is an unknown function. Such manipulation leads to allocation of resources.
This vulnerability is uniquely identified as CVE-2026-76282. The attack can be launched remotely. No exploit exists.
You should upgrade the affected component.
No detection rules found.
No public exploits indexed.
2026-10-07
Published