CVE-2026-76302
published 2026-10-21CVE-2026-76302: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review…
PriorityP357critical9.9CVSS 3.1
AVNACLPRLUINSCCHIHAH
EPSS
0.38%
30.6th percentile
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76302 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| splunk | splunk_enterprise | >= 10.0 < 10.0.11 | 10.0.11 |
| splunk | splunk_enterprise | >= 10.2 < 10.2.8 | 10.2.8 |
| splunk | splunk_enterprise | >= 10.4 < 10.4.4 | 10.4.4 |
| splunk | splunk_enterprise | >= 9.4 < 9.4.16 | 9.4.16 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review.
ghsa_unreviewed·2026-10-22·CVSS 9.9
CVE-2026-76302 [CRITICAL] CWE-707 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review.
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76302 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.
VulDB
Splunk Enterprise up to 9.4.15/10.0.10/10.2.7/10.4.3 neutralization
vuldb·2026-10-22
CVE-2026-76302 Splunk Enterprise up to 9.4.15/10.0.10/10.2.7/10.4.3 neutralization
A vulnerability described as very critical has been identified in Splunk Enterprise up to 9.4.15/10.0.10/10.2.7/10.4.3. This impacts an unknown function. Executing a manipulation can lead to improper neutralization.
This vulnerability appears as CVE-2026-76302. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is recommended.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-10-21
Published