CVE-2026-76283
published 2026-10-07CVE-2026-76283: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
PriorityP344high7.6CVSS 3.1
AVNACLPRLUINSUCHILAL
EPSS
0.19%
8.7th percentile
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76283 are related to protection mechanism failure and are grouped under the Common Weakness Enumeration (CWE) CWE-693.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| splunk | splunk | >= 10.0.0 < 10.0.10 | 10.0.10 |
| splunk | splunk | >= 10.2.0 < 10.2.7 | 10.2.7 |
| splunk | splunk | >= 10.4.0 < 10.4.3 | 10.4.3 |
| splunk | splunk | >= 9.4.0 < 9.4.15 | 9.4.15 |
| splunk | splunk_enterprise | >= 10.0 < 10.0.10 | 10.0.10 |
| splunk | splunk_enterprise | >= 10.2 < 10.2.7 | 10.2.7 |
| splunk | splunk_enterprise | >= 10.4 < 10.4.3 | 10.4.3 |
| splunk | splunk_enterprise | >= 9.4 < 9.4.15 | 9.4.15 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Splunk Enterprise up to 9.4.14/10.0.9/10.2.6/10.4.2 protection mechanism
vuldb·2026-10-07
CVE-2026-76283 [CRITICAL] Splunk Enterprise up to 9.4.14/10.0.9/10.2.6/10.4.2 protection mechanism
A vulnerability has been found in Splunk Enterprise up to 9.4.14/10.0.9/10.2.6/10.4.2 and classified as critical. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in protection mechanism failure.
This vulnerability was named CVE-2026-76283. The attack may be initiated remotely. There is no available exploit.
The affected component should be upgraded.
GHSA
Protection Mechanism Failure.
ghsa_unreviewed·2026-10-07
CVE-2026-76283 [HIGH] CWE-693 Protection Mechanism Failure.
Protection Mechanism Failure. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-10-07
Published