CVE-2026-76300
published 2026-10-21CVE-2026-76300: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
PriorityP430
EPSS
0.17%
6.0th percentile
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76300 are related to improper control of a resource through its lifetime and are grouped under the Common Weakness Enumeration (CWE) CWE-664.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| splunk | splunk_enterprise | >= 10.0 < 10.0.11 | 10.0.11 |
| splunk | splunk_enterprise | >= 10.2 < 10.2.8 | 10.2.8 |
| splunk | splunk_enterprise | >= 10.4 < 10.4.4 | 10.4.4 |
| splunk | splunk_enterprise | >= 9.4 < 9.4.16 | 9.4.16 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review.
ghsa_unreviewed·2026-10-22
CVE-2026-76300 CWE-664 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review.
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76300 are related to improper control of a resource through its lifetime and are grouped under the Common Weakness Enumeration (CWE) CWE-664.
VulDB
Splunk Enterprise up to 9.4.15/10.0.10/10.2.7/10.4.3 resource control
vuldb·2026-10-22
CVE-2026-76300 Splunk Enterprise up to 9.4.15/10.0.10/10.2.7/10.4.3 resource control
A vulnerability categorized as very critical has been discovered in Splunk Enterprise up to 9.4.15/10.0.10/10.2.7/10.4.3. This affects an unknown part. Executing a manipulation can lead to improper control of resource through lifetime.
This vulnerability is registered as CVE-2026-76300. It is possible to launch the attack remotely. No exploit is available.
It is advisable to upgrade the affected component.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-10-21
Published